Microsoft Windows 10 1809 vulnerabilities
3,744 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,744
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2676MEDIUM920LOW8
Vulnerabilities
Page 24 of 188
CVE-2023-24926P3HIGHCVSS 8.8fixed in 10.0.17763.42522023-04-11
CVE-2023-24926 [HIGH] CWE-122 CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24884P3HIGHCVSS 8.8fixed in 10.0.17763.42522023-04-11
CVE-2023-24884 [HIGH] CWE-681 CVE-2023-24884: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-28243P3HIGHCVSS 8.8fixed in 10.0.17763.42522023-04-11
CVE-2023-28243 [HIGH] CWE-843 CVE-2023-28243: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21239P3HIGHCVSS 8.8fixed in 10.0.17763.67752025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21241P3HIGHCVSS 8.8fixed in 10.0.17763.67752025-01-14
CVE-2025-21241 [HIGH] CWE-122 CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21248P3HIGHCVSS 8.8fixed in 10.0.17763.67752025-01-14
CVE-2025-21248 [HIGH] CWE-122 CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2023-24876P3HIGHCVSS 8.8fixed in 10.0.17763.41312023-03-14
CVE-2023-24876 [HIGH] CWE-122 CVE-2023-24876: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2026-96252P3CRITICALCVSS 9.1fixed in 10.0.17763.93762026-10-13
CVE-2026-96252 [CRITICAL] CWE-347 CVE-2026-96252: Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) all
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-105008P3CRITICALCVSS 9.0fixed in 10.0.17763.93762026-10-13
CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-33066P3HIGHCVSS 8.8fixed in 10.0.17763.74342025-06-10
CVE-2025-33066 [HIGH] CWE-122 CVE-2025-33066: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-21695P3HIGHCVSS 8.8fixed in 10.0.17763.40102023-02-14
CVE-2023-21695 [HIGH] CWE-122 CVE-2023-21695: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2026-47289P3HIGHCVSS 8.8fixed in 10.0.17763.88802026-06-09
CVE-2026-47289 [HIGH] CWE-122 CVE-2026-47289: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73018P3HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83998P3HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-83998 [HIGH] CWE-122 CVE-2026-83998: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72986P3HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68828P3HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62785P3HIGHCVSS 8.8fixed in 10.0.17763.91152026-08-11
CVE-2026-62785 [HIGH] CWE-122 CVE-2026-62785: Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85817P3HIGHCVSS 8.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85817 [HIGH] CWE-807 CVE-2026-85817: Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88116P3HIGHCVSS 8.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88116 [HIGH] CWE-822 CVE-2026-88116: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88112P3HIGHCVSS 8.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88112 [HIGH] CWE-822 CVE-2026-88112: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
nvd