Microsoft Windows 10 1809 vulnerabilities

CVE-2025-64673 [HIGH] CWE-284 CVE-2025-64673: Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges lo Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-108136 [HIGH] CWE-416 CVE-2026-108136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70228 [HIGH] CWE-125 CVE-2026-70228: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85843 [HIGH] CWE-908 CVE-2026-85843: Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-25175 [HIGH] CWE-125 CVE-2026-25175: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-45607 [HIGH] CWE-125 CVE-2026-45607: Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-105004 [HIGH] CWE-125 CVE-2026-105004: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83832 [HIGH] CWE-125 CVE-2026-83832: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-103553 [HIGH] CWE-125 CVE-2026-103553: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96324 [HIGH] CWE-416 CVE-2026-96324: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 [HIGH] CWE-134 CVE-2026-83585: Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-24290 [HIGH] CWE-284 CVE-2026-24290: Improper access control in Windows Projected File System allows an authorized attacker to elevate pr Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2025-54092 [HIGH] CWE-362 CVE-2025-54092: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70123 [HIGH] CWE-122 CVE-2026-70123: Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate pr Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69966 [HIGH] CWE-190 CVE-2026-69966: Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to eleva Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 [HIGH] CWE-862 CVE-2026-83583: Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-65799 [HIGH] CWE-122 CVE-2026-65799: Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges lo Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-77503 [HIGH] CWE-125 CVE-2026-77503: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2026-69295 [HIGH] CWE-20 CVE-2026-69295: Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69585 [HIGH] CWE-704 CVE-2026-69585: Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacke Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.