Microsoft Windows 10 Version 1809 vulnerabilities
5,321 known vulnerabilities affecting microsoft/windows_10_version_1809.
Total CVEs
5,321
CISA KEV
122
actively exploited
Public exploits
101
Exploited in wild
162
Severity breakdown
CRITICAL185HIGH3829MEDIUM1293LOW14
Vulnerabilities
Page 12 of 267
CVE-2019-0943P3HIGHCVSS 7.8PoC≥ 10.0.17763.0, < publication≥ 10.0.0, < publication2019-06-12
CVE-2019-0943 [HIGH] CVE-2019-0943: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Loc
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user
nvd
CVE-2025-53766P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12
CVE-2025-53766 [CRITICAL] CWE-122 CVE-2025-53766: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-36936P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.2114≥ 10.0.0, < 10.0.17763.21142021-08-12
CVE-2021-36936 [CRITICAL] CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
nvd
CVE-2026-44815P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.88802026-06-09
CVE-2026-44815 [CRITICAL] CWE-121 CVE-2026-44815: Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code o
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85806P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-85806 [CRITICAL] CWE-121 CVE-2026-85806: Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-84015P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-84015 [CRITICAL] CWE-122 CVE-2026-84015: Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthor
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-53143P2HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12
CVE-2025-53143 [HIGH] CWE-843 CVE-2025-53143: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53145P2HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12
CVE-2025-53145 [HIGH] CWE-843 CVE-2025-53145: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53144P2HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2021-26432P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.2114≥ 10.0.0, < 10.0.17763.21142021-08-12
CVE-2021-26432 [CRITICAL] CVE-2021-26432: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
nvd
CVE-2020-17095P2CRITICALCVSS 9.9≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-17095 [CRITICAL] CVE-2020-17095: Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-38044P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.3532≥ 10.0.0, < 10.0.17763.35322022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36028P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.5122≥ 10.0.0, < 10.0.17763.51222023-11-14
CVE-2023-36028 [CRITICAL] CWE-122 CVE-2023-36028: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2021-34535P2HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.2114≥ 10.0.0, < 10.0.17763.21142021-08-12
CVE-2021-34535 [HIGH] CVE-2021-34535: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2026-49181P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14
CVE-2026-49181 [CRITICAL] CWE-191 CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-69910P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08
CVE-2026-69910 [CRITICAL] CWE-121 CVE-2026-69910: Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72982P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08
CVE-2026-72982 [CRITICAL] CWE-121 CVE-2026-72982: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73025P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08
CVE-2026-73025 [CRITICAL] CWE-1390 CVE-2026-73025: Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21769P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.4252≥ 10.0.0, < 10.0.17763.42522023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.4377≥ 10.0.0, < 10.0.17763.43772023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd