Microsoft Windows 10 1809 vulnerabilities

CVE-2025-27471 [MEDIUM] CWE-591 CVE-2025-27471: Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthor Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

CVE-2026-83500 [MEDIUM] CWE-601 CVE-2026-83500: Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized atta Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-69569 [MEDIUM] CWE-822 CVE-2026-69569: Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to d Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.

CVE-2023-36713 [MEDIUM] CWE-908 CVE-2023-36713: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2026-69405 [MEDIUM] CWE-401 CVE-2026-69405: Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attac Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-85816 [MEDIUM] CWE-125 CVE-2026-85816: Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information ove Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

CVE-2026-70055 [MEDIUM] CWE-497 CVE-2026-70055: Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

CVE-2026-70260 [MEDIUM] CWE-497 CVE-2026-70260: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70261 [MEDIUM] CWE-497 CVE-2026-70261: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-83705 [MEDIUM] CWE-497 CVE-2026-83705: Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allow Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83835 [MEDIUM] CWE-126 CVE-2026-83835: Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

CVE-2025-29956 [MEDIUM] CWE-126 CVE-2025-29956: Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

CVE-2026-23670 [MEDIUM] CWE-822 CVE-2026-23670: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVE-2025-62567 [MEDIUM] CWE-191 CVE-2025-62567: Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny serv Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.

CVE-2026-35423 [MEDIUM] CWE-125 CVE-2026-35423: Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a n Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-70084 [MEDIUM] CWE-22 CVE-2026-70084: Improper access control in Windows Projected File System allows an authorized attacker to disclose i Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-68886 [MEDIUM] CWE-209 CVE-2026-68886: Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

CVE-2026-70137 [MEDIUM] CWE-306 CVE-2026-70137: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

CVE-2026-69554 [MEDIUM] CWE-306 CVE-2026-69554: Missing authentication for critical function in Microsoft Windows Search Component allows an authori Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

CVE-2026-42914 [MEDIUM] CWE-125 CVE-2026-42914: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.