Microsoft Windows 10 1809 vulnerabilities

CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-88157 [HIGH] CWE-122 CVE-2026-88157: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-62823 [HIGH] CWE-122 CVE-2026-62823: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-85905 [HIGH] CWE-122 CVE-2026-85905: Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-70229 [HIGH] CWE-863 CVE-2026-70229: Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70127 [HIGH] CWE-416 CVE-2026-70127: Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43622 [HIGH] CWE-122 CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43620 [HIGH] CWE-122 CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43621 [HIGH] CWE-122 CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability

CVE-2023-24886 [HIGH] CWE-908 CVE-2023-24886: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-24925 [HIGH] CWE-416 CVE-2023-24925: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability