Microsoft Windows 10 1809 vulnerabilities
3,765 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,765
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2686MEDIUM931LOW8
Vulnerabilities
Page 109 of 189
CVE-2026-85840P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-88137P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97828P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85841P3MEDIUMCVSS 6.6fixed in 10.0.17763.93762026-10-13
CVE-2026-85841 [MEDIUM] CWE-416 CVE-2026-85841: Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-61920P3MEDIUMCVSS 6.6fixed in 10.0.17763.91212026-08-11
CVE-2026-61920 [MEDIUM] CWE-362 CVE-2026-61920: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
nvd
CVE-2022-35743P3HIGHCVSS 7.8fixed in 10.0.17763.32872023-05-31
CVE-2022-35743 [HIGH] CWE-94 CVE-2022-35743: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
nvd
CVE-2023-36596P3HIGHCVSS 7.5fixed in 10.0.17763.49742023-10-10
CVE-2023-36596 [HIGH] CWE-822 CVE-2023-36596: Remote Procedure Call Information Disclosure Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
nvd
CVE-2025-21220P3HIGHCVSS 7.5fixed in 10.0.17763.67752025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2023-36438P3HIGHCVSS 7.5fixed in 10.0.17763.49742023-10-10
CVE-2023-36438 [HIGH] CVE-2023-36438: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-36905P3HIGHCVSS 7.5fixed in 10.0.17763.47372023-08-08
CVE-2023-36905 [HIGH] CWE-125 CVE-2023-36905: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
nvd
CVE-2023-36393P3HIGHCVSS 7.8fixed in 10.0.17763.51222023-11-14
CVE-2023-36393 [HIGH] CWE-426 CVE-2023-36393: Windows User Interface Application Core Remote Code Execution Vulnerability
Windows User Interface Application Core Remote Code Execution Vulnerability
nvd
CVE-2024-30073P3HIGHCVSS 7.8fixed in 10.0.17763.62932024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
nvd
CVE-2023-35358P3HIGHCVSS 7.8fixed in 10.0.17763.46452023-07-11
CVE-2023-35358 [HIGH] CWE-125 CVE-2023-35358: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-35357P3HIGHCVSS 7.8fixed in 10.0.17763.46452023-07-11
CVE-2023-35357 [HIGH] CWE-125 CVE-2023-35357: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38066P3HIGHCVSS 7.8fixed in 10.0.17763.60542024-07-09
CVE-2024-38066 [HIGH] CWE-416 CVE-2024-38066: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2023-36598P3HIGHCVSS 7.8fixed in 10.0.17763.49742023-10-10
CVE-2023-36598 [HIGH] CWE-122 CVE-2023-36598: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36704P3HIGHCVSS 7.8fixed in 10.0.17763.49742023-10-10
CVE-2023-36704 [HIGH] CWE-908 CVE-2023-36704: Windows Setup Files Cleanup Remote Code Execution Vulnerability
Windows Setup Files Cleanup Remote Code Execution Vulnerability
nvd
CVE-2024-38034P3HIGHCVSS 7.8fixed in 10.0.17763.60542024-07-09
CVE-2024-38034 [HIGH] CWE-190 CVE-2024-38034: Windows Filtering Platform Elevation of Privilege Vulnerability
Windows Filtering Platform Elevation of Privilege Vulnerability
nvd
CVE-2023-23420P3HIGHCVSS 7.8fixed in 10.0.17763.41312023-03-14
CVE-2023-23420 [HIGH] CWE-416 CVE-2023-23420: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28248P3HIGHCVSS 7.8fixed in 10.0.17763.42522023-04-11
CVE-2023-28248 [HIGH] CWE-190 CVE-2023-28248: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd