Microsoft Windows 10 1809 vulnerabilities

CVE-2026-49168 [MEDIUM] CWE-190 CVE-2026-49168: Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2024-37976 [MEDIUM] CWE-190 CVE-2024-37976: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-37983 [MEDIUM] CWE-822 CVE-2024-37983: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2025-55226 [MEDIUM] CWE-362 CVE-2025-55226: Concurrent execution using shared resource with improper synchronization ('race condition') in Graph Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2026-69373 [MEDIUM] CWE-125 CVE-2026-69373: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-72935 [MEDIUM] CWE-125 CVE-2026-72935: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-65795 [MEDIUM] CWE-197 CVE-2026-65795: Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-21265 [MEDIUM] CWE-1329 CVE-2026-21265: Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificate Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes related to Windows boot manager or Secure Boot. The ope

CVE-2026-0390 [MEDIUM] CWE-807 CVE-2026-0390: Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized atta Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

CVE-2024-26209 [MEDIUM] CWE-908 CVE-2024-26209: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2026-96300 [MEDIUM] CWE-770 CVE-2026-96300: Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

CVE-2026-50324 [MEDIUM] CWE-835 CVE-2026-50324: Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-69723 [MEDIUM] CWE-497 CVE-2026-69723: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.

CVE-2026-69349 [MEDIUM] CWE-908 CVE-2026-69349: Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

CVE-2026-102198 [MEDIUM] CWE-125 CVE-2026-102198: Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

CVE-2023-20588 [MEDIUM] CWE-369 CVE-2023-20588: A division-by-zero error on some AMD processors can potentially return speculative data resulting i A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2024-20659 [HIGH] CWE-20 CVE-2024-20659: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2025-21419 [HIGH] CWE-59 CVE-2025-21419: Windows Setup Files Cleanup Elevation of Privilege Vulnerability Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2024-21314 [MEDIUM] CWE-125 CVE-2024-21314: Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-20660 [MEDIUM] CWE-125 CVE-2024-20660: Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability