cbcvebase.

Microsoft Windows 10 1809 vulnerabilities

3,579 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs
3,579
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL134HIGH2561MEDIUM876LOW8

Vulnerabilities

Page 9 of 179
CVE-2025-53144P2HIGHCVSS 8.8fixed in 10.0.17763.76782025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2023-36028P2CRITICALCVSS 9.8fixed in 10.0.17763.51222023-11-14
CVE-2023-36028 [CRITICAL] CWE-122 CVE-2023-36028: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2026-49181P2CRITICALCVSS 9.8fixed in 10.0.17763.90202026-07-14
CVE-2026-49181 [CRITICAL] CWE-191 CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-69910P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69910 [CRITICAL] CWE-121 CVE-2026-69910: Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72982P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-72982 [CRITICAL] CWE-121 CVE-2026-72982: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73025P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-73025 [CRITICAL] CWE-1390 CVE-2026-73025: Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21769P3HIGHCVSS 7.5fixed in 10.0.17763.42522023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8fixed in 10.0.17763.43772023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2026-69762P2HIGHCVSS 8.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69762 [HIGH] CWE-121 CVE-2026-69762: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-38140P2CRITICALCVSS 9.8fixed in 10.0.17763.61892024-08-13
CVE-2024-38140 [CRITICAL] CWE-416 CVE-2024-38140: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
nvd
CVE-2023-23415P2CRITICALCVSS 9.8fixed in 10.0.17763.41312023-03-14
CVE-2023-23415 [CRITICAL] CWE-122 CVE-2023-23415: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
nvd
CVE-2024-43532P2HIGHCVSS 8.8fixed in 10.0.17763.64142024-10-08
CVE-2024-43532 [HIGH] CWE-636 CVE-2024-43532: Remote Registry Service Elevation of Privilege Vulnerability Remote Registry Service Elevation of Privilege Vulnerability
nvd
CVE-2023-35349P2CRITICALCVSS 9.8fixed in 10.0.17763.49742023-10-10
CVE-2023-35349 [CRITICAL] CWE-20 CVE-2023-35349: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-20674P2HIGHCVSS 8.8fixed in 10.0.17763.53292024-01-09
CVE-2024-20674 [HIGH] CWE-305 CVE-2024-20674: Windows Kerberos Security Feature Bypass Vulnerability Windows Kerberos Security Feature Bypass Vulnerability
nvd
CVE-2026-69590P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-69590 [CRITICAL] CWE-122 CVE-2026-69590: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-70024P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-70024 [CRITICAL] CWE-20 CVE-2026-70024: Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70262P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-70262 [CRITICAL] CWE-122 CVE-2026-70262: Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a ne Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-85809P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85809 [CRITICAL] CWE-122 CVE-2026-85809: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-72950P2CRITICALCVSS 9.8fixed in 10.0.17763.92452026-09-08
CVE-2026-72950 [CRITICAL] CWE-122 CVE-2026-72950: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-85792P2CRITICALCVSS 9.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85792 [CRITICAL] CWE-416 CVE-2026-85792: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
Microsoft Windows 10 1809 vulnerabilities | cvebase