Microsoft Windows 10 Version 1809 vulnerabilities

3,136 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs
3,136
CISA KEV
115
actively exploited
Public exploits
58
Exploited in wild
102
Severity breakdown
CRITICAL83HIGH2242MEDIUM800LOW11

Vulnerabilities

Page 20 of 157
CVE-2025-54913HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54913 [HIGH] CWE-362 CVE-2025-54913: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54895HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54895 [HIGH] CWE-190 CVE-2025-54895: Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54111HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54111 [HIGH] CWE-416 CVE-2025-54111: Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate pr Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53807HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-53807 [HIGH] CWE-362 CVE-2025-53807: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54102HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54102 [HIGH] CWE-416 CVE-2025-54102: Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevat Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54919HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54919 [HIGH] CWE-362 CVE-2025-54919: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-54110HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54110 [HIGH] CWE-190 CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54099HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54099 [HIGH] CWE-121 CVE-2025-54099: Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized at Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53800HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-53800 [HIGH] CWE-1419 CVE-2025-53800: No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privi No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54115HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54115 [HIGH] CWE-362 CVE-2025-54115: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54918HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54918 [HIGH] CWE-287 CVE-2025-54918: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a n Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
cvelistv5nvd
CVE-2025-54116HIGHCVSS 7.3≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54116 [HIGH] CWE-284 CVE-2025-54116: Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate priv Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54916HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54916 [HIGH] CWE-121 CVE-2025-54916: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-49734HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-49734 [HIGH] CWE-923 CVE-2025-49734: Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54091HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54091 [HIGH] CWE-122 CVE-2025-54091: Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privilege Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54894HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2025-54911HIGHCVSS 7.3≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54911 [HIGH] CWE-416 CVE-2025-54911: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53801HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-53801 [HIGH] CWE-822 CVE-2025-53801: Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges loc Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54912HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54098HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09
CVE-2025-54098 [HIGH] CWE-284 CVE-2025-54098: Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges local Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
← Previous20 / 157Next →