Microsoft Windows 10 Version 1809 vulnerabilities

5,326 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

5,326

CISA KEV

122

actively exploited

Public exploits

101

Exploited in wild

162

Severity breakdown

CRITICAL182HIGH3832MEDIUM1298LOW14

Vulnerabilities

SortPage 4 of 267

CVE-2026-96951P1HIGHCVSS 8.8KEV≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-96951 [HIGH] CWE-77 CVE-2026-96951: Improper neutralization of special elements used in a command ('command injection') in Windows Shell Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

nvd

CVE-2023-36036P1HIGHCVSS 7.8KEVRansomware≥ 10.0.17763.0, < 10.0.17763.5122≥ 10.0.0, < 10.0.17763.51222023-11-14

CVE-2023-36036 [HIGH] CWE-122 CVE-2023-36036: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-23376P1HIGHCVSS 7.8KEVRansomware≥ 10.0.17763.0, < 10.0.17763.4010≥ 10.0.0, < 10.0.17763.40102023-02-14

CVE-2023-23376 [HIGH] CWE-122 CVE-2023-23376: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2024-21351P1HIGHCVSS 7.6KEV≥ 10.0.17763.0, < 10.0.17763.5458≥ 10.0.0, < 10.0.17763.54582024-02-13

CVE-2024-21351 [HIGH] CWE-94 CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability Windows SmartScreen Security Feature Bypass Vulnerability

nvd

CVE-2026-85880P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-85880 [HIGH] CWE-122 CVE-2026-85880: Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

nvd

CVE-2021-36948P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.2114≥ 10.0.0, < 10.0.17763.21142021-08-12

CVE-2021-36948 [HIGH] CVE-2021-36948: Windows Update Medic Service Elevation of Privilege Vulnerability Windows Update Medic Service Elevation of Privilege Vulnerability

nvd

CVE-2024-26169P1HIGHCVSS 7.8KEVRansomware≥ 10.0.17763.0, < 10.0.17763.5576≥ 10.0.0, < 10.0.17763.55762024-03-12

CVE-2024-26169 [HIGH] CWE-269 CVE-2024-26169: Windows Error Reporting Service Elevation of Privilege Vulnerability Windows Error Reporting Service Elevation of Privilege Vulnerability

nvd

CVE-2022-41073P1HIGHCVSS 7.8KEVRansomware≥ 10.0.17763.0, < 10.0.17763.3650≥ 10.0.0, < 10.0.17763.36502022-11-09

CVE-2022-41073 [HIGH] CWE-787 CVE-2022-41073: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2022-22047P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.3165≥ 10.0.0, < 10.0.17763.31652022-07-12

CVE-2022-22047 [HIGH] CWE-426 CVE-2022-22047: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

nvd

CVE-2022-22718P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.2565≥ 10.0.0, < 10.0.17763.25652022-02-09

CVE-2022-22718 [HIGH] CVE-2022-22718: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2024-30040P1HIGHCVSS 8.8KEV≥ 10.0.17763.0, < 10.0.17763.5820≥ 10.0.0, < 10.0.17763.58202024-05-14

CVE-2024-30040 [HIGH] CWE-20 CVE-2024-30040: Windows MSHTML Platform Security Feature Bypass Vulnerability Windows MSHTML Platform Security Feature Bypass Vulnerability

nvd

CVE-2019-1069P1HIGHCVSS 7.8KEVRansomware≥ 10.0.17763.0, < publication≥ 10.0.0, < publication2019-06-12

CVE-2019-1069 [HIGH] CWE-59 CVE-2019-1069: An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certa An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addr

nvd

CVE-2026-21533P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.83892026-02-10

CVE-2026-21533 [HIGH] CWE-269 CVE-2026-21533: Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate pri Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

nvd

CVE-2020-1464P2MEDIUMCVSS 5.5KEV≥ 10.0.0, < publication2020-08-17

CVE-2020-1464 [MEDIUM] CWE-347 CVE-2020-1464: A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update address

nvd

CVE-2025-62221P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.81462025-12-09

CVE-2025-62221 [HIGH] CWE-416 CVE-2025-62221: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-30400P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.73142025-05-13

CVE-2025-30400 [HIGH] CWE-416 CVE-2025-30400: Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-68820P1HIGHCVSS 7.0KEV≥ 10.0.17763.0, < 10.0.17763.91212026-08-11

CVE-2026-68820 [HIGH] CWE-416 CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2021-33771P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.2061≥ 10.0.0, < 10.0.17763.20612021-07-14

CVE-2021-33771 [HIGH] CVE-2021-33771: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2022-38028P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.3532≥ 10.0.0, < 10.0.17763.35322022-10-11

CVE-2022-38028 [HIGH] CVE-2022-38028: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability

nvd

CVE-2026-21519P1HIGHCVSS 7.8KEV≥ 10.0.17763.0, < 10.0.17763.83892026-02-10

CVE-2026-21519 [HIGH] CWE-843 CVE-2026-21519: Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

nvd

← Previous4 / 267Next →