Microsoft Windows 10 Version 1809 vulnerabilities

3,581 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

3,581

CISA KEV

117

actively exploited

Public exploits

Exploited in wild

156

Severity breakdown

CRITICAL104HIGH2569MEDIUM894LOW14

Vulnerabilities

SortPage 56 of 180

CVE-2024-30015P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.5820≥ 10.0.0, < 10.0.17763.58202024-05-14

CVE-2024-30015 [HIGH] CWE-197 CVE-2024-30015: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2024-30029P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.5820≥ 10.0.0, < 10.0.17763.58202024-05-14

CVE-2024-30029 [HIGH] CWE-197 CVE-2024-30029: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2024-30014P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.5820≥ 10.0.0, < 10.0.17763.58202024-05-14

CVE-2024-30014 [HIGH] CWE-197 CVE-2024-30014: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

nvd

CVE-2026-20846P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.83892026-02-10

CVE-2026-20846 [HIGH] CWE-126 CVE-2026-20846: Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-60707P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.80272025-11-11

CVE-2025-60707 [HIGH] CWE-416 CVE-2025-60707: Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevat Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62455P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.81462025-12-09

CVE-2025-62455 [HIGH] CWE-20 CVE-2025-62455: Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privil Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54912P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09

CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53132P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-53132 [HIGH] CWE-362 CVE-2025-53132: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58613P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-58613 [HIGH] CWE-416 CVE-2026-58613: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53152P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

nvd

CVE-2025-49761P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53151P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-53151 [HIGH] CWE-416 CVE-2025-53151: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50328P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50328 [HIGH] CWE-20 CVE-2026-50328: Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampe Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

nvd

CVE-2025-50153P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-60703P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.80272025-11-11

CVE-2025-60703 [HIGH] CWE-822 CVE-2025-60703: Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate pri Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49176P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-49176 [HIGH] CWE-59 CVE-2026-49176: Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-55236P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.77922025-09-09

CVE-2025-55236 [HIGH] CWE-367 CVE-2025-55236: Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker t Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.

nvd

CVE-2026-50462P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50462 [HIGH] CWE-73 CVE-2026-50462: External control of file name or path in Windows Ancillary Function Driver for WinSock allows an aut External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-60720P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.80272025-11-11

CVE-2025-60720 [HIGH] CWE-126 CVE-2025-60720: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20923P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.82762026-01-13

CVE-2026-20923 [HIGH] CWE-416 CVE-2026-20923: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

nvd

← Previous56 / 180Next →