cbcvebase.

Microsoft Windows 10 1809 vulnerabilities

3,747 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs
3,747
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2677MEDIUM922LOW8

Vulnerabilities

Page 37 of 188
CVE-2026-62783P3HIGHCVSS 7.8fixed in 10.0.17763.91152026-08-11
CVE-2026-62783 [HIGH] CWE-122 CVE-2026-62783: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62758P3HIGHCVSS 7.8fixed in 10.0.17763.91152026-08-11
CVE-2026-62758 [HIGH] CWE-122 CVE-2026-62758: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62755P3HIGHCVSS 7.8fixed in 10.0.17763.91152026-08-11
CVE-2026-62755 [HIGH] CWE-121 CVE-2026-62755: Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileg Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70014P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-70014 [HIGH] CWE-416 CVE-2026-70014: Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-72954P3HIGHCVSS 7.5fixed in 10.0.17763.92452026-09-08
CVE-2026-72954 [HIGH] CWE-416 CVE-2026-72954: Use after free in Windows Deployment Services allows an authorized attacker to execute code over a n Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-62813P3HIGHCVSS 7.5fixed in 10.0.17763.92452026-09-08
CVE-2026-62813 [HIGH] CWE-416 CVE-2026-62813: Use after free in Active Directory Domain Services allows an authorized attacker to execute code ove Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-72943P3HIGHCVSS 7.5fixed in 10.0.17763.92452026-09-08
CVE-2026-72943 [HIGH] CWE-416 CVE-2026-72943: Use after free in Windows Deployment Services allows an authorized attacker to execute code over a n Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69757P3HIGHCVSS 7.5fixed in 10.0.17763.92452026-09-08
CVE-2026-69757 [HIGH] CWE-416 CVE-2026-69757: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69761P3HIGHCVSS 7.5fixed in 10.0.17763.92452026-09-08
CVE-2026-69761 [HIGH] CWE-416 CVE-2026-69761: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-58531P3HIGHCVSS 7.5fixed in 10.0.17763.90202026-07-14
CVE-2026-58531 [HIGH] CWE-362 CVE-2026-58531: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21310P3HIGHCVSS 7.8fixed in 10.0.17763.53292024-01-09
CVE-2024-21310 [HIGH] CWE-197 CVE-2024-21310: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38054P3HIGHCVSS 7.8fixed in 10.0.17763.60542024-07-09
CVE-2024-38054 [HIGH] CWE-122 CVE-2024-38054: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38180P3HIGHCVSS 8.8fixed in 10.0.17763.61892024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2024-21369P3HIGHCVSS 8.8fixed in 10.0.17763.54582024-02-13
CVE-2024-21369 [HIGH] CWE-122 CVE-2024-21369: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-21332P3HIGHCVSS 8.8fixed in 10.0.17763.67752025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2024-21350P3HIGHCVSS 8.8fixed in 10.0.17763.54582024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-29362P3HIGHCVSS 8.8fixed in 10.0.17763.44992023-06-14
CVE-2023-29362 [HIGH] CWE-122 CVE-2023-29362: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-29967P3HIGHCVSS 8.8fixed in 10.0.17763.73142025-05-13
CVE-2025-29967 [HIGH] CWE-122 CVE-2025-29967: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to exec Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38131P3HIGHCVSS 8.8fixed in 10.0.17763.61892024-08-13
CVE-2024-38131 [HIGH] CWE-591 CVE-2024-38131: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
nvd
CVE-2025-29964P3HIGHCVSS 8.8fixed in 10.0.17763.73142025-05-13
CVE-2025-29964 [HIGH] CWE-122 CVE-2025-29964: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
Microsoft Windows 10 1809 vulnerabilities | cvebase