cbcvebase.

Microsoft Windows 10 1809 vulnerabilities

3,778 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs
3,778
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL144HIGH2694MEDIUM932LOW8

Vulnerabilities

Page 149 of 189
CVE-2026-49174P3MEDIUMCVSS 6.1fixed in 10.0.17763.90202026-07-14
CVE-2026-49174 [MEDIUM] CWE-306 CVE-2026-49174: Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-70091P3MEDIUMCVSS 5.9fixed in 10.0.17763.92452026-09-08
CVE-2026-70091 [MEDIUM] CWE-362 CVE-2026-70091: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-69317P4MEDIUMCVSS 5.7fixed in 10.0.17763.92452026-09-08
CVE-2026-69317 [MEDIUM] CWE-125 CVE-2026-69317: Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information ov Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-32011P3HIGHCVSS 7.5fixed in 10.0.17763.44992023-06-14
CVE-2023-32011 [HIGH] CWE-125 CVE-2023-32011: Windows iSCSI Discovery Service Denial of Service Vulnerability Windows iSCSI Discovery Service Denial of Service Vulnerability
nvd
CVE-2023-35330P4HIGHCVSS 7.5fixed in 10.0.17763.46452023-07-11
CVE-2023-35330 [HIGH] CWE-126 CVE-2023-35330: Windows Extended Negotiation Denial of Service Vulnerability Windows Extended Negotiation Denial of Service Vulnerability
nvd
CVE-2023-21811P3HIGHCVSS 7.5fixed in 10.0.17763.40102023-02-14
CVE-2023-21811 [HIGH] CWE-126 CVE-2023-21811: Windows iSCSI Service Denial of Service Vulnerability Windows iSCSI Service Denial of Service Vulnerability
nvd
CVE-2023-21700P3HIGHCVSS 7.5fixed in 10.0.17763.40102023-02-14
CVE-2023-21700 [HIGH] CWE-476 CVE-2023-21700: Windows iSCSI Discovery Service Denial of Service Vulnerability Windows iSCSI Discovery Service Denial of Service Vulnerability
nvd
CVE-2023-21702P3HIGHCVSS 7.5fixed in 10.0.17763.40102023-02-14
CVE-2023-21702 [HIGH] CWE-125 CVE-2023-21702: Windows iSCSI Service Denial of Service Vulnerability Windows iSCSI Service Denial of Service Vulnerability
nvd
CVE-2023-32044P3HIGHCVSS 7.5fixed in 10.0.17763.46452023-07-11
CVE-2023-32044 [HIGH] CWE-125 CVE-2023-32044: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-32045P3HIGHCVSS 7.5fixed in 10.0.17763.46452023-07-11
CVE-2023-32045 [HIGH] CWE-125 CVE-2023-32045: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-36427P3HIGHCVSS 7.0fixed in 10.0.17763.51222023-11-14
CVE-2023-36427 [HIGH] CVE-2023-36427: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2024-49082P4MEDIUMCVSS 6.8fixed in 10.0.17763.66592024-12-12
CVE-2024-49082 [MEDIUM] CWE-22 CVE-2024-49082: Windows File Explorer Information Disclosure Vulnerability Windows File Explorer Information Disclosure Vulnerability
nvd
CVE-2025-59208P3HIGHCVSS 7.1fixed in 10.0.17763.79192025-10-14
CVE-2025-59208 [HIGH] CWE-125 CVE-2025-59208: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information o Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-21349P4MEDIUMCVSS 6.8fixed in 10.0.17763.68932025-02-11
CVE-2025-21349 [MEDIUM] CWE-287 CVE-2025-21349: Windows Remote Desktop Configuration Service Tampering Vulnerability Windows Remote Desktop Configuration Service Tampering Vulnerability
nvd
CVE-2025-59282P3HIGHCVSS 7.0fixed in 10.0.17763.79192025-10-14
CVE-2025-59282 [HIGH] CWE-362 CVE-2025-59282: Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-30099P4HIGHCVSS 7.0fixed in 10.0.17763.59362024-06-11
CVE-2024-30099 [HIGH] CWE-367 CVE-2024-30099: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-24954P4MEDIUMCVSS 6.5fixed in 10.0.17763.43772023-05-09
CVE-2023-24954 [MEDIUM] CWE-918 CVE-2023-24954: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability
nvd
CVE-2023-36403P4HIGHCVSS 7.0fixed in 10.0.17763.51222023-11-14
CVE-2023-36403 [HIGH] CWE-591 CVE-2023-36403: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-43535P4HIGHCVSS 7.0fixed in 10.0.17763.64142024-10-08
CVE-2024-43535 [HIGH] CWE-416 CVE-2024-43535: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43570P4HIGHCVSS 7.0fixed in 10.0.17763.64142024-10-08
CVE-2024-43570 [HIGH] CWE-416 CVE-2024-43570: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
← Previous149 / 189Next →
Microsoft Windows 10 1809 vulnerabilities | cvebase