Microsoft Windows 10 Version 1809 vulnerabilities

CVE-2026-42985 [HIGH] CWE-416 CVE-2026-42985: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-32225 [HIGH] CWE-693 CVE-2026-32225: Improper neutralization of special elements used in a command ('command injection') in Windows Shell Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70068 [HIGH] CWE-122 CVE-2026-70068: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attac Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-71336 [HIGH] CWE-190 CVE-2026-71336: Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execu Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

CVE-2026-69461 [HIGH] CWE-121 CVE-2026-69461: Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a n Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVE-2026-50505 [HIGH] CWE-416 CVE-2026-50505: Use after free in Windows Message Queuing allows an authorized attacker to execute code over a netwo Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.

CVE-2026-83777 [HIGH] CWE-122 CVE-2026-83777: Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate p Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83928 [HIGH] CWE-306 CVE-2026-83928: Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthor Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88121 [HIGH] CWE-416 CVE-2026-88121: Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2025-21285 [HIGH] CWE-476 CVE-2025-21285: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2021-36958 [HIGH] CVE-2021-36958: A remote code execution vulnerability exists when the Windows Print Spooler service improperly perfo A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

CVE-2024-38240 [CRITICAL] CWE-125 CVE-2024-38240: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2026-105010 [CRITICAL] CWE-416 CVE-2026-105010: Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate priv Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-49164 [CRITICAL] CWE-122 CVE-2026-49164: Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to ex Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-50380 [CRITICAL] CWE-122 CVE-2026-50380: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

CVE-2021-28445 [HIGH] CVE-2021-28445: Windows Network File System Remote Code Execution Vulnerability Windows Network File System Remote Code Execution Vulnerability

CVE-2024-20678 [HIGH] CWE-843 CVE-2024-20678: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-29137 [HIGH] CVE-2022-29137: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-22014 [HIGH] CVE-2022-22014: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-22013 [HIGH] CVE-2022-22013: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability