Microsoft Windows 10 1809 vulnerabilities
3,778 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,778
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL144HIGH2694MEDIUM932LOW8
Vulnerabilities
Page 160 of 189
CVE-2026-83657P4MEDIUMCVSS 5.5fixed in 10.0.17763.93762026-10-13
CVE-2026-83657 [MEDIUM] CWE-1390 CVE-2026-83657: Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perfo
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-45595P4MEDIUMCVSS 5.4fixed in 10.0.17763.88802026-06-09
CVE-2026-45595 [MEDIUM] CWE-693 CVE-2026-45595: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2022-26934P4MEDIUMCVSS 6.5fixed in 10.0.17763.2928v10.0.17763.29282022-05-10
CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2025-50158P4HIGHCVSS 7.0fixed in 10.0.17763.76782025-08-12
CVE-2025-50158 [HIGH] CWE-367 CVE-2025-50158: Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-23385P4HIGHCVSS 7.0fixed in 10.0.17763.41312023-03-14
CVE-2023-23385 [HIGH] CWE-190 CVE-2023-23385: Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
nvd
CVE-2023-28269P4MEDIUMCVSS 6.8fixed in 10.0.17763.42522023-04-11
CVE-2023-28269 [MEDIUM] CWE-122 CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2024-38013P4MEDIUMCVSS 6.7fixed in 10.0.17763.60542024-07-09
CVE-2024-38013 [MEDIUM] CWE-59 CVE-2024-38013: Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
nvd
CVE-2024-49101P4MEDIUMCVSS 6.6fixed in 10.0.17763.66592024-12-12
CVE-2024-49101 [MEDIUM] CWE-125 CVE-2024-49101: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49109P4MEDIUMCVSS 6.6fixed in 10.0.17763.66592024-12-12
CVE-2024-49109 [MEDIUM] CWE-125 CVE-2024-49109: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8fixed in 10.0.17763.88802026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2024-49081P4MEDIUMCVSS 6.6fixed in 10.0.17763.66592024-12-12
CVE-2024-49081 [MEDIUM] CWE-122 CVE-2024-49081: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49094P4MEDIUMCVSS 6.6fixed in 10.0.17763.66592024-12-12
CVE-2024-49094 [MEDIUM] CWE-122 CVE-2024-49094: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49111P4MEDIUMCVSS 6.6fixed in 10.0.17763.66592024-12-12
CVE-2024-49111 [MEDIUM] CWE-125 CVE-2024-49111: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2022-35754P4MEDIUMCVSS 6.7fixed in 10.0.17763.32872023-05-31
CVE-2022-35754 [MEDIUM] CVE-2022-35754: Unified Write Filter Elevation of Privilege Vulnerability
Unified Write Filter Elevation of Privilege Vulnerability
nvd
CVE-2026-69469P4MEDIUMCVSS 6.6fixed in 10.0.17763.92452026-09-08
CVE-2026-69469 [MEDIUM] CWE-122 CVE-2026-69469: Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthoriz
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2024-21316P4MEDIUMCVSS 6.1fixed in 10.0.17763.53292024-01-09
CVE-2024-21316 [MEDIUM] CWE-20 CVE-2024-21316: Windows Server Key Distribution Service Security Feature Bypass
Windows Server Key Distribution Service Security Feature Bypass
nvd
CVE-2024-21430P4MEDIUMCVSS 6.4fixed in 10.0.17763.55762024-03-12
CVE-2024-21430 [MEDIUM] CWE-125 CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-21339P4MEDIUMCVSS 6.4fixed in 10.0.17763.54582024-02-13
CVE-2024-21339 [MEDIUM] CWE-416 CVE-2024-21339: Windows USB Generic Parent Driver Remote Code Execution Vulnerability
Windows USB Generic Parent Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21242P4MEDIUMCVSS 5.9fixed in 10.0.17763.67752025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability
Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2026-49807P4MEDIUMCVSS 6.2fixed in 10.0.17763.90202026-07-14
CVE-2026-49807 [MEDIUM] CWE-200 CVE-2026-49807: Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
nvd