Microsoft Windows 10 Version 1809 vulnerabilities
3,581 known vulnerabilities affecting microsoft/windows_10_version_1809.
Total CVEs
3,581
CISA KEV
117
actively exploited
Public exploits
98
Exploited in wild
156
Severity breakdown
CRITICAL104HIGH2569MEDIUM894LOW14
Vulnerabilities
Page 36 of 180
CVE-2021-26876P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26876 [HIGH] CVE-2021-26876: OpenType Font Parsing Remote Code Execution Vulnerability
OpenType Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2022-21857P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.2452≥ 10.0.0, < 10.0.17763.24522022-01-11
CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2023-35359P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4737≥ 10.0.0, < 10.0.17763.47372023-08-08
CVE-2023-35359 [HIGH] CWE-23 CVE-2023-35359: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-24528P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.2803≥ 10.0.0, < 10.0.17763.28032022-04-15
CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2021-33750P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33749P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33749 [HIGH] CVE-2021-33749: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33752P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33752 [HIGH] CVE-2021-33752: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33756P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33756 [HIGH] CVE-2021-33756: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2022-38045P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3532≥ 10.0.0, < 10.0.17763.35322022-10-11
CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability
Windows Server Service Elevation of Privilege Vulnerability
nvd
CVE-2019-0720P3HIGHCVSS 8.0≥ 10.0.0, < publication2019-08-14
CVE-2019-0720 [HIGH] CWE-20 CVE-2019-0720: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to exe
nvd
CVE-2022-34691P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3287≥ 10.0.0, < 10.0.17763.32872022-08-09
CVE-2022-34691 [HIGH] CWE-269 CVE-2022-34691: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2024-38180P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.61892024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2021-41342P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.17763.22372021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3532≥ 10.0.0, < 10.0.17763.35322022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21332P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.67752025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2023-29373P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4499≥ 10.0.0, < 10.0.17763.44992023-06-14
CVE-2023-29373 [HIGH] CWE-125 CVE-2023-29373: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-32038P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4645≥ 10.0.0, < 10.0.17763.46452023-07-11
CVE-2023-32038 [HIGH] CWE-416 CVE-2023-32038: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-29967P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.73142025-05-13
CVE-2025-29967 [HIGH] CWE-122 CVE-2025-29967: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to exec
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50343P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14
CVE-2026-50343 [HIGH] CWE-269 CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2020-16891P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd