cbcvebase.

Microsoft Windows 10 1809 vulnerabilities

3,756 known vulnerabilities affecting microsoft/windows_10_1809.

Total CVEs
3,756
CISA KEV
104
actively exploited
Public exploits
63
Exploited in wild
115
Severity breakdown
CRITICAL140HIGH2681MEDIUM927LOW8

Vulnerabilities

Page 92 of 188
CVE-2026-83837P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-83837 [HIGH] CWE-441 CVE-2026-83837: Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85796P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85796 [HIGH] CWE-121 CVE-2026-85796: Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88194P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88194 [HIGH] CWE-125 CVE-2026-88194: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88182P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88182 [HIGH] CWE-416 CVE-2026-88182: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88181P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88181 [HIGH] CWE-125 CVE-2026-88181: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85829P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-85829 [HIGH] CWE-415 CVE-2026-85829: Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88188P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88188 [HIGH] CWE-125 CVE-2026-88188: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96928P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96928 [HIGH] CWE-125 CVE-2026-96928: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96867P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-96862P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-96862 [HIGH] CWE-125 CVE-2026-96862: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88179P3HIGHCVSS 7.8fixed in 10.0.17763.93762026-10-13
CVE-2026-88179 [HIGH] CWE-125 CVE-2026-88179: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59187P3HIGHCVSS 7.8fixed in 10.0.17763.79192025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65773P3HIGHCVSS 7.8fixed in 10.0.17763.91152026-08-11
CVE-2026-65773 [HIGH] CWE-284 CVE-2026-65773: Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50343P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14
CVE-2026-50343 [HIGH] CWE-269 CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40409P3HIGHCVSS 7.8fixed in 10.0.17763.88802026-06-09
CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-45592P3HIGHCVSS 7.8fixed in 10.0.17763.88802026-06-09
CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26153P3HIGHCVSS 7.8fixed in 10.0.17763.86442026-04-14
CVE-2026-26153 [HIGH] CWE-125 CVE-2026-26153: Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50491P3HIGHCVSS 7.8fixed in 10.0.17763.90202026-07-14
CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59278P3HIGHCVSS 7.8fixed in 10.0.17763.79192025-10-14
CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59275P3HIGHCVSS 7.8fixed in 10.0.17763.79192025-10-14
CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
← Previous92 / 188Next →
Microsoft Windows 10 1809 vulnerabilities | cvebase