Microsoft Windows 10 1809 vulnerabilities
3,747 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,747
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2677MEDIUM922LOW8
Vulnerabilities
Page 50 of 188
CVE-2026-85373P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85373 [HIGH] CWE-122 CVE-2026-85373: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85358P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85358 [HIGH] CWE-122 CVE-2026-85358: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85366P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85366 [HIGH] CWE-122 CVE-2026-85366: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96318P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96318 [HIGH] CWE-122 CVE-2026-96318: Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85927P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85927 [HIGH] CWE-122 CVE-2026-85927: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96312P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96856P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96217P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26180P3HIGHCVSS 7.8fixed in 10.0.17763.86442026-04-14
CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50375P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14
CVE-2026-50375 [HIGH] CWE-122 CVE-2026-50375: Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58726P3HIGHCVSS 7.5fixed in 10.0.17763.79192025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26158P3HIGHCVSS 7.8fixed in 10.0.17763.56962024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2026-87711P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38244P3HIGHCVSS 7.8fixed in 10.0.17763.62932024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21819P3HIGHCVSS 7.5fixed in 10.0.17763.40102023-02-14
CVE-2023-21819 [HIGH] CWE-125 CVE-2023-21819: Windows Secure Channel Denial of Service Vulnerability
Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2026-70095P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69991P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69987P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69994P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69984P3HIGHCVSS 7.5fixed in 10.0.17763.93762026-10-13
CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd