Microsoft Windows 10 Version 1809 vulnerabilities
5,316 known vulnerabilities affecting microsoft/windows_10_version_1809.
Total CVEs
5,316
CISA KEV
122
actively exploited
Public exploits
101
Exploited in wild
162
Severity breakdown
CRITICAL185HIGH3827MEDIUM1290LOW14
Vulnerabilities
Page 48 of 266
CVE-2024-38180P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.61892024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2025-21332P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.67752025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2024-21350P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.5458≥ 10.0.0, < 10.0.17763.54582024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-29362P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.44992023-06-14
CVE-2023-29362 [HIGH] CWE-122 CVE-2023-29362: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-29967P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.73142025-05-13
CVE-2025-29967 [HIGH] CWE-122 CVE-2025-29967: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to exec
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38131P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.61892024-08-13
CVE-2024-38131 [HIGH] CWE-591 CVE-2024-38131: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
nvd
CVE-2025-29964P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.73142025-05-13
CVE-2025-29964 [HIGH] CWE-122 CVE-2025-29964: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29963P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.73142025-05-13
CVE-2025-29963 [HIGH] CWE-122 CVE-2025-29963: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32162P3HIGHCVSS 8.4≥ 10.0.17763.0, < 10.0.17763.86442026-04-14
CVE-2026-32162 [HIGH] CWE-349 CVE-2026-32162: Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized atta
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-20843P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.82762026-01-13
CVE-2026-20843 [HIGH] CWE-284 CVE-2026-20843: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21238P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.83892026-02-10
CVE-2026-21238 [HIGH] CWE-284 CVE-2026-21238: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49740P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.75582025-07-08
CVE-2025-49740 [HIGH] CWE-693 CVE-2025-49740: Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a secu
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2022-26919P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.2803≥ 10.0.0, < 10.0.17763.28032022-04-15
CVE-2022-26919 [HIGH] CVE-2022-26919: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-24291P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.85112026-03-10
CVE-2026-24291 [HIGH] CWE-732 CVE-2026-24291: Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBro
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-30141P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.3046≥ 10.0.0, < 10.0.17763.30462022-06-15
CVE-2022-30141 [HIGH] CVE-2022-30141: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2025-24035P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.70092025-03-11
CVE-2025-24035 [HIGH] CWE-591 CVE-2025-24035: Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unau
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-27914P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.86442026-04-14
CVE-2026-27914 [HIGH] CWE-284 CVE-2026-27914: Improper access control in Microsoft Management Console allows an authorized attacker to elevate pri
Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21295P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.67752025-01-14
CVE-2025-21295 [HIGH] CWE-416 CVE-2025-21295: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
nvd
CVE-2025-59516P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.81462025-12-09
CVE-2025-59516 [HIGH] CWE-73 CVE-2025-59516: Missing authentication for critical function in Windows Storage VSP Driver allows an authorized atta
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62454P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.81462025-12-09
CVE-2025-62454 [HIGH] CWE-122 CVE-2025-62454: Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd