Microsoft Windows 10 1809 vulnerabilities

CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83741 [HIGH] CWE-416 CVE-2026-83741: Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

CVE-2026-61349 [HIGH] CWE-362 CVE-2026-61349: Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69650 [HIGH] CWE-347 CVE-2026-69650: Improper verification of cryptographic signature in Windows Key Distribution Center allows an author Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-40382 [HIGH] CWE-416 CVE-2026-40382: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87712 [HIGH] CWE-416 CVE-2026-87712: Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-85933 [HIGH] CWE-416 CVE-2026-85933: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-27920 [HIGH] CWE-822 CVE-2026-27920: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-85863 [HIGH] CWE-416 CVE-2026-85863: Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85861 [HIGH] CWE-416 CVE-2026-85861: Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72978 [HIGH] CWE-770 CVE-2026-72978: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-26170 [HIGH] CWE-20 CVE-2026-26170: Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privilege Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVE-2026-27910 [HIGH] CWE-280 CVE-2026-27910: Improper handling of insufficient permissions or privileges in Windows Installer allows an authorize Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-32165 [HIGH] CWE-362 CVE-2026-32165: Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges lo Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

CVE-2026-32164 [HIGH] CWE-362 CVE-2026-32164: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

CVE-2026-32163 [HIGH] CWE-362 CVE-2026-32163: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

CVE-2026-27911 [HIGH] CWE-362 CVE-2026-27911: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

CVE-2024-30092 [HIGH] CWE-20 CVE-2024-30092: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-73017 [HIGH] CWE-122 CVE-2026-73017: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.