Microsoft Windows 10 1809 vulnerabilities

2,099 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs

2,099

CISA KEV

100

actively exploited

Public exploits

Exploited in wild

111

Severity breakdown

CRITICAL63HIGH1493MEDIUM535LOW8

Vulnerabilities

SortPage 39 of 105

CVE-2026-44802P3HIGHCVSS 7.8fixed in 10.0.17763.88802026-06-09

CVE-2026-44802 [HIGH] CWE-416 CVE-2026-44802: Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50358P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-50358 [HIGH] CWE-416 CVE-2026-50358: Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50490P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-50490 [HIGH] CWE-416 CVE-2026-50490: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49167P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-49167 [HIGH] CWE-416 CVE-2026-49167: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50306P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-50306 [HIGH] CWE-190 CVE-2026-50306: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50689P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-50689 [HIGH] CWE-362 CVE-2026-50689: Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges local Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-54129P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-54129 [HIGH] CWE-416 CVE-2026-54129: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50307P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14

CVE-2026-50307 [HIGH] CWE-416 CVE-2026-50307: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-44806P3HIGHCVSS 7.5fixed in 10.0.17763.90202026-07-14

CVE-2026-44806 [HIGH] CWE-401 CVE-2026-44806: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-49788P3HIGHCVSS 7.5fixed in 10.0.17763.90202026-07-14

CVE-2026-49788 [HIGH] CWE-770 CVE-2026-49788: Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-27484P3HIGHCVSS 7.5fixed in 10.0.17763.71362025-04-08

CVE-2025-27484 [HIGH] CWE-591 CVE-2025-27484: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-50470P3HIGHCVSS 7.5fixed in 10.0.17763.90202026-07-14

CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-50415P3HIGHCVSS 7.5fixed in 10.0.17763.90202026-07-14

CVE-2026-50415 [HIGH] CWE-200 CVE-2026-50415: Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized a Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2023-38144P3HIGHCVSS 7.8fixed in 10.0.17763.48512023-09-12

CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2024-38085P3HIGHCVSS 7.8fixed in 10.0.17763.60542024-07-09

CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2024-30032P3HIGHCVSS 7.8fixed in 10.0.17763.58202024-05-14

CVE-2024-30032 [HIGH] CWE-416 CVE-2024-30032: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability

nvd

CVE-2024-20653P3HIGHCVSS 7.8fixed in 10.0.17763.53292024-01-09

CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability Microsoft Common Log File System Elevation of Privilege Vulnerability

nvd

CVE-2023-38143P3HIGHCVSS 7.8fixed in 10.0.17763.48512023-09-12

CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-23388P3HIGHCVSS 8.8fixed in 10.0.17763.41312023-03-14

CVE-2023-23388 [HIGH] CWE-681 CVE-2023-23388: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-35380P3HIGHCVSS 7.8fixed in 10.0.17763.47372023-08-08

CVE-2023-35380 [HIGH] CWE-416 CVE-2023-35380: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

← Previous39 / 105Next →