Microsoft Windows 10 Version 1809 vulnerabilities
3,581 known vulnerabilities affecting microsoft/windows_10_version_1809.
Total CVEs
3,581
CISA KEV
117
actively exploited
Public exploits
98
Exploited in wild
156
Severity breakdown
CRITICAL104HIGH2569MEDIUM894LOW14
Vulnerabilities
Page 138 of 180
CVE-2026-20821P4MEDIUMCVSS 6.2≥ 10.0.17763.0, < 10.0.17763.82762026-01-13
CVE-2026-20821 [MEDIUM] CWE-200 CVE-2026-20821: Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows a
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
nvd
CVE-2022-21924P4MEDIUMCVSS 5.3≥ 10.0.17763.0, < 10.0.17763.2452≥ 10.0.0, < 10.0.17763.24522022-01-11
CVE-2022-21924 [MEDIUM] CVE-2022-21924: Workstation Service Remote Protocol Security Feature Bypass Vulnerability
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
nvd
CVE-2025-27471P4MEDIUMCVSS 5.9≥ 10.0.17763.0, < 10.0.17763.71362025-04-08
CVE-2025-27471 [MEDIUM] CWE-591 CVE-2025-27471: Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthor
Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.
nvd
CVE-2023-36713P4MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.4974≥ 10.0.0, < 10.0.17763.49742023-10-10
CVE-2023-36713 [MEDIUM] CWE-908 CVE-2023-36713: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2026-20824P4MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.82762026-01-13
CVE-2026-20824 [MEDIUM] CWE-693 CVE-2026-20824: Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-23670P4MEDIUMCVSS 5.7≥ 10.0.17763.0, < 10.0.17763.86442026-04-14
CVE-2026-23670 [MEDIUM] CWE-822 CVE-2026-23670: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-35423P4MEDIUMCVSS 5.4≥ 10.0.17763.0, < 10.0.17763.87552026-05-12
CVE-2026-35423 [MEDIUM] CWE-125 CVE-2026-35423: Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a n
Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-45595P4MEDIUMCVSS 5.4≥ 10.0.17763.0, < 10.0.17763.88802026-06-09
CVE-2026-45595 [MEDIUM] CWE-693 CVE-2026-45595: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-34507P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-34507 [MEDIUM] CVE-2021-34507: Windows Remote Assistance Information Disclosure Vulnerability
Windows Remote Assistance Information Disclosure Vulnerability
nvd
CVE-2022-26934P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.2928≥ 10.0.0, < 10.0.17763.29282022-05-10
CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2019-0711P4MEDIUMCVSS 6.8≥ 10.0.17763.0, < publication≥ 10.0.0, < publication2019-06-12
CVE-2019-0711 [MEDIUM] CWE-20 CVE-2019-0711: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau
nvd
CVE-2019-0713P4MEDIUMCVSS 6.8≥ 10.0.17763.0, < publication≥ 10.0.0, < publication2019-06-12
CVE-2019-0713 [MEDIUM] CWE-20 CVE-2019-0713: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau
nvd
CVE-2019-0710P4MEDIUMCVSS 6.8≥ 10.0.17763.0, < publication≥ 10.0.0, < publication2019-06-12
CVE-2019-0710 [MEDIUM] CWE-20 CVE-2019-0710: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau
nvd
CVE-2020-17014P4HIGHCVSS 7.1≥ 10.0.0, < publication2020-11-11
CVE-2020-17014 [HIGH] CVE-2020-17014: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-30208P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.3165≥ 10.0.0, < 10.0.17763.31652022-07-12
CVE-2022-30208 [MEDIUM] CVE-2022-30208: Windows Security Account Manager (SAM) Denial of Service Vulnerability
Windows Security Account Manager (SAM) Denial of Service Vulnerability
nvd
CVE-2022-21997P4HIGHCVSS 7.1≥ 10.0.17763.0, < 10.0.17763.2565≥ 10.0.0, < 10.0.17763.25652022-02-09
CVE-2022-21997 [HIGH] CWE-59 CVE-2022-21997: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-22022P4HIGHCVSS 7.1≥ 10.0.17763.0, < 10.0.17763.3165≥ 10.0.0, < 10.0.17763.31652022-07-12
CVE-2022-22022 [HIGH] CVE-2022-22022: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-30226P4HIGHCVSS 7.1≥ 10.0.17763.0, < 10.0.17763.3165≥ 10.0.0, < 10.0.17763.31652022-07-12
CVE-2022-30226 [HIGH] CVE-2022-30226: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-35837P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.3406≥ 10.0.0, < 10.0.17763.34062022-09-13
CVE-2022-35837 [MEDIUM] CVE-2022-35837: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-34690P4HIGHCVSS 7.1≥ 10.0.17763.0, < 10.0.17763.3287≥ 10.0.0, < 10.0.17763.32872022-08-09
CVE-2022-34690 [HIGH] CVE-2022-34690: Windows Fax Service Elevation of Privilege Vulnerability
Windows Fax Service Elevation of Privilege Vulnerability
nvd