Microsoft Windows 10 1809 vulnerabilities

CVE-2026-50294 [MEDIUM] CWE-497 CVE-2026-50294: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.

CVE-2025-27735 [MEDIUM] CWE-345 CVE-2025-27735: Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclav Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69416 [MEDIUM] CWE-126 CVE-2026-69416: Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjace Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69644 [MEDIUM] CWE-497 CVE-2026-69644: Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

CVE-2026-20824 [MEDIUM] CWE-693 CVE-2026-20824: Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-32088 [MEDIUM] CWE-362 CVE-2026-32088: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-72980 [MEDIUM] CWE-427 CVE-2026-72980: Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-68831 [MEDIUM] CWE-552 CVE-2026-68831: Files or directories accessible to external parties in Windows Defender Firewall Service allows an a Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

CVE-2026-69351 [MEDIUM] CWE-359 CVE-2026-69351: Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

CVE-2026-83565 [MEDIUM] CWE-126 CVE-2026-83565: Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

CVE-2026-70041 [MEDIUM] CWE-126 CVE-2026-70041: Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-69954 [MEDIUM] CWE-126 CVE-2026-69954: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-70234 [MEDIUM] CWE-126 CVE-2026-70234: Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-68843 [MEDIUM] CWE-416 CVE-2026-68843: Use after free in Microsoft Office Word allows an authorized attacker to disclose information locall Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

CVE-2026-83719 [MEDIUM] CWE-126 CVE-2026-83719: Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

CVE-2026-83664 [MEDIUM] CWE-843 CVE-2026-83664: Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-85935 [MEDIUM] CWE-126 CVE-2026-85935: Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.