Microsoft Windows 10 1809 vulnerabilities
3,778 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,778
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL144HIGH2694MEDIUM932LOW8
Vulnerabilities
Page 135 of 189
CVE-2025-21290P3HIGHCVSS 7.5fixed in 10.0.17763.67752025-01-14
CVE-2025-21290 [HIGH] CWE-400 CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21270P3HIGHCVSS 7.5fixed in 10.0.17763.67752025-01-14
CVE-2025-21270 [HIGH] CWE-400 CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-43565P3HIGHCVSS 7.5fixed in 10.0.17763.64142024-10-08
CVE-2024-43565 [HIGH] CWE-125 CVE-2024-43565: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2024-43562P3HIGHCVSS 7.5fixed in 10.0.17763.64142024-10-08
CVE-2024-43562 [HIGH] CWE-125 CVE-2024-43562: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2025-21330P3HIGHCVSS 7.5fixed in 10.0.17763.67752025-01-14
CVE-2025-21330 [HIGH] CWE-400 CVE-2025-21330: Windows Remote Desktop Services Denial of Service Vulnerability
Windows Remote Desktop Services Denial of Service Vulnerability
nvd
CVE-2023-21816P3HIGHCVSS 7.5fixed in 10.0.17763.40102023-02-14
CVE-2023-21816 [HIGH] CWE-20 CVE-2023-21816: Windows Active Directory Domain Services API Denial of Service Vulnerability
Windows Active Directory Domain Services API Denial of Service Vulnerability
nvd
CVE-2024-30093P3HIGHCVSS 7.3fixed in 10.0.17763.59362024-06-11
CVE-2024-30093 [HIGH] CWE-59 CVE-2024-30093: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2025-21331P3HIGHCVSS 7.3fixed in 10.0.17763.67752025-01-14
CVE-2025-21331 [HIGH] CWE-59 CVE-2025-21331: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-30050P3MEDIUMCVSS 5.4fixed in 10.0.17763.58202024-05-14
CVE-2024-30050 [MEDIUM] CWE-693 CVE-2024-30050: Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2026-70126P3HIGHCVSS 7.1fixed in 10.0.17763.93762026-10-13
CVE-2026-70126 [HIGH] CWE-20 CVE-2026-70126: Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-50354P3HIGHCVSS 7.1fixed in 10.0.17763.90202026-07-14
CVE-2026-50354 [HIGH] CWE-416 CVE-2026-50354: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-24940P3HIGHCVSS 7.5fixed in 10.0.17763.43772023-05-09
CVE-2023-24940 [HIGH] CWE-476 CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
nvd
CVE-2025-60716P3HIGHCVSS 7.0fixed in 10.0.17763.80272025-11-11
CVE-2025-60716 [HIGH] CWE-416 CVE-2025-60716: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83505P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-83505 [HIGH] CWE-367 CVE-2026-83505: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83785P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-83785 [HIGH] CWE-416 CVE-2026-83785: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53134P3HIGHCVSS 7.0fixed in 10.0.17763.76782025-08-12
CVE-2025-53134 [HIGH] CWE-200 CVE-2025-53134: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69549P3HIGHCVSS 7.0fixed in 10.0.17763.92452026-09-08
CVE-2026-69549 [HIGH] CWE-125 CVE-2026-69549: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83575P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-83575 [HIGH] CWE-416 CVE-2026-83575: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83564P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-83564 [HIGH] CWE-416 CVE-2026-83564: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69387P3HIGHCVSS 7.0fixed in 10.0.17763.93762026-10-13
CVE-2026-69387 [HIGH] CWE-416 CVE-2026-69387: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd