cbcvebase.

Microsoft Windows 10 1809 vulnerabilities

3,765 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs
3,765
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2686MEDIUM931LOW8

Vulnerabilities

Page 124 of 189
CVE-2026-85364P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-85364 [HIGH] CWE-416 CVE-2026-85364: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85361P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-85361 [HIGH] CWE-416 CVE-2026-85361: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87708P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-87708 [HIGH] CWE-416 CVE-2026-87708: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88124P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-88124 [HIGH] CWE-416 CVE-2026-88124: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96302P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-96302 [HIGH] CWE-416 CVE-2026-96302: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96305P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-96305 [HIGH] CWE-416 CVE-2026-96305: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96216P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-96216 [HIGH] CWE-416 CVE-2026-96216: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102211P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-102211 [HIGH] CWE-362 CVE-2026-102211: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96313P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-96313 [HIGH] CWE-306 CVE-2026-96313: Missing authentication for critical function in Windows Push Notifications allows an authorized atta Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85846P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-85846 [HIGH] CWE-416 CVE-2026-85846: Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96307P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-96307 [HIGH] CWE-416 CVE-2026-96307: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50166P3MEDIUMCVSS 6.5fixed in 10.0.17763.76782025-08-12
CVE-2025-50166 [MEDIUM] CWE-190 CVE-2025-50166: Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized a Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-70166P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-70166 [MEDIUM] CWE-125 CVE-2026-70166: Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83649P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-83649 [MEDIUM] CWE-125 CVE-2026-83649: Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83667P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-83667 [MEDIUM] CWE-125 CVE-2026-83667: Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83521P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-83521 [MEDIUM] CWE-125 CVE-2026-83521: Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-56186P3MEDIUMCVSS 6.5fixed in 10.0.17763.90202026-07-14
CVE-2026-56186 [MEDIUM] CWE-125 CVE-2026-56186: Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85821P3MEDIUMCVSS 6.5fixed in 10.0.17763.93762026-10-13
CVE-2026-85821 [MEDIUM] CWE-125 CVE-2026-85821: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50432P3MEDIUMCVSS 6.5fixed in 10.0.17763.90202026-07-14
CVE-2026-50432 [MEDIUM] CWE-416 CVE-2026-50432: Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny ser Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-65794P3MEDIUMCVSS 6.5fixed in 10.0.17763.91152026-08-11
CVE-2026-65794 [MEDIUM] CWE-126 CVE-2026-65794: Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
nvd
← Previous124 / 189Next →
Microsoft Windows 10 1809 vulnerabilities | cvebase