Microsoft Windows 10 1809 vulnerabilities
3,579 known vulnerabilities affecting microsoft/windows_10_1809.
Total CVEs
3,579
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL134HIGH2561MEDIUM876LOW8
Vulnerabilities
Page 9 of 179
CVE-2025-53144P2HIGHCVSS 8.8fixed in 10.0.17763.76782025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2023-36028P2CRITICALCVSS 9.8fixed in 10.0.17763.51222023-11-14
CVE-2023-36028 [CRITICAL] CWE-122 CVE-2023-36028: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2026-49181P2CRITICALCVSS 9.8fixed in 10.0.17763.90202026-07-14
CVE-2026-49181 [CRITICAL] CWE-191 CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-69910P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69910 [CRITICAL] CWE-121 CVE-2026-69910: Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72982P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-72982 [CRITICAL] CWE-121 CVE-2026-72982: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73025P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-73025 [CRITICAL] CWE-1390 CVE-2026-73025: Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21769P3HIGHCVSS 7.5fixed in 10.0.17763.42522023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8fixed in 10.0.17763.43772023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2026-69762P2HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69762 [HIGH] CWE-121 CVE-2026-69762: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-38140P2CRITICALCVSS 9.8fixed in 10.0.17763.61892024-08-13
CVE-2024-38140 [CRITICAL] CWE-416 CVE-2024-38140: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
nvd
CVE-2023-23415P2CRITICALCVSS 9.8fixed in 10.0.17763.41312023-03-14
CVE-2023-23415 [CRITICAL] CWE-122 CVE-2023-23415: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
nvd
CVE-2024-43532P2HIGHCVSS 8.8fixed in 10.0.17763.64142024-10-08
CVE-2024-43532 [HIGH] CWE-636 CVE-2024-43532: Remote Registry Service Elevation of Privilege Vulnerability
Remote Registry Service Elevation of Privilege Vulnerability
nvd
CVE-2023-35349P2CRITICALCVSS 9.8fixed in 10.0.17763.49742023-10-10
CVE-2023-35349 [CRITICAL] CWE-20 CVE-2023-35349: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-20674P2HIGHCVSS 8.8fixed in 10.0.17763.53292024-01-09
CVE-2024-20674 [HIGH] CWE-305 CVE-2024-20674: Windows Kerberos Security Feature Bypass Vulnerability
Windows Kerberos Security Feature Bypass Vulnerability
nvd
CVE-2026-69590P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69590 [CRITICAL] CWE-122 CVE-2026-69590: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-70024P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-70024 [CRITICAL] CWE-20 CVE-2026-70024: Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70262P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-70262 [CRITICAL] CWE-122 CVE-2026-70262: Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a ne
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-85809P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85809 [CRITICAL] CWE-122 CVE-2026-85809: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-72950P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-72950 [CRITICAL] CWE-122 CVE-2026-72950: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-85792P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85792 [CRITICAL] CWE-416 CVE-2026-85792: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd