Microsoft Windows 10 Version 1809 vulnerabilities

5,321 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

5,321

CISA KEV

122

actively exploited

Public exploits

101

Exploited in wild

162

Severity breakdown

CRITICAL185HIGH3831MEDIUM1291LOW14

Vulnerabilities

SortPage 24 of 267

CVE-2026-20840P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.82762026-01-13

CVE-2026-20840 [HIGH] CWE-122 CVE-2026-20840: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

nvd

CVE-2023-36423P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.5122≥ 10.0.0, < 10.0.17763.51222023-11-14

CVE-2023-36423 [HIGH] CWE-122 CVE-2023-36423: Microsoft Remote Registry Service Remote Code Execution Vulnerability Microsoft Remote Registry Service Remote Code Execution Vulnerability

nvd

CVE-2023-21676P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3887≥ 10.0.0, < 10.0.17763.38872023-01-10

CVE-2023-21676 [HIGH] CVE-2023-21676: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

nvd

CVE-2025-24051P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.70092025-03-11

CVE-2025-24051 [HIGH] CWE-122 CVE-2025-24051: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2023-35641P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.5206≥ 10.0.0, < 10.0.17763.52062023-12-12

CVE-2023-35641 [HIGH] CWE-682 CVE-2023-35641: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

nvd

CVE-2026-83784P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83784 [HIGH] CWE-36 CVE-2026-83784: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to ele Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2025-64678P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.80272025-12-09

CVE-2025-64678 [HIGH] CWE-122 CVE-2025-64678: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-70089P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-70089 [HIGH] CWE-122 CVE-2026-70089: Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a net Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-77496P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-77496 [HIGH] CWE-122 CVE-2026-77496: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-70258P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-70258 [HIGH] CWE-122 CVE-2026-70258: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-100220P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-100220 [HIGH] CWE-122 CVE-2026-100220: Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-83642P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83642 [HIGH] CWE-843 CVE-2026-83642: Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized a Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-80096P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-80096 [HIGH] CWE-125 CVE-2026-80096: Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privi Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-83778P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83778 [HIGH] CWE-122 CVE-2026-83778: Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to ex Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-96952P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-96952 [HIGH] CWE-122 CVE-2026-96952: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-102203P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-102203 [HIGH] CWE-843 CVE-2026-102203: Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-108458P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-108458 [HIGH] CWE-416 CVE-2026-108458: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-83874P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83874 [HIGH] CWE-122 CVE-2026-83874: Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-103575P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-103575 [HIGH] CWE-416 CVE-2026-103575: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-70203P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-70203 [HIGH] CWE-122 CVE-2026-70203: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

nvd

← Previous24 / 267Next →