cbcvebase.

Microsoft Windows 10 Version 1809 vulnerabilities

5,316 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs
5,316
CISA KEV
122
actively exploited
Public exploits
101
Exploited in wild
162
Severity breakdown
CRITICAL185HIGH3827MEDIUM1290LOW14

Vulnerabilities

Page 64 of 266
CVE-2026-69553P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.92452026-09-08
CVE-2026-69553 [HIGH] CWE-862 CVE-2026-69553: Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-83511P3HIGHCVSS 7.4≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-83511 [HIGH] CWE-1390 CVE-2026-83511: Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36900P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4737≥ 10.0.0, < 10.0.17763.47372023-08-08
CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21549P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3887≥ 10.0.0, < 10.0.17763.38872023-01-10
CVE-2023-21549 [HIGH] CWE-285 CVE-2023-21549: Windows SMB Witness Service Elevation of Privilege Vulnerability Windows SMB Witness Service Elevation of Privilege Vulnerability
nvd
CVE-2023-28275P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4252≥ 10.0.0, < 10.0.17763.42522023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21732P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3887≥ 10.0.0, < 10.0.17763.38872023-01-10
CVE-2023-21732 [HIGH] CWE-121 CVE-2023-21732: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21681P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.3887≥ 10.0.0, < 10.0.17763.38872023-01-10
CVE-2023-21681 [HIGH] CWE-191 CVE-2023-21681: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-35359P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4737≥ 10.0.0, < 10.0.17763.47372023-08-08
CVE-2023-35359 [HIGH] CWE-23 CVE-2023-35359: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-29372P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4499≥ 10.0.0, < 10.0.17763.44992023-06-14
CVE-2023-29372 [HIGH] CWE-122 CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32038P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4645≥ 10.0.0, < 10.0.17763.46452023-07-11
CVE-2023-32038 [HIGH] CWE-416 CVE-2023-32038: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21797P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4010≥ 10.0.0, < 10.0.17763.40102023-02-14
CVE-2023-21797 [HIGH] CWE-190 CVE-2023-21797: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21798P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4010≥ 10.0.0, < 10.0.17763.40102023-02-14
CVE-2023-21798 [HIGH] CWE-125 CVE-2023-21798: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2026-88115P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-88115 [HIGH] CWE-125 CVE-2026-88115: Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-35315P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.4645≥ 10.0.0, < 10.0.17763.46452023-07-11
CVE-2023-35315 [HIGH] CWE-190 CVE-2023-35315: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2026-26178P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.86442026-04-14
CVE-2026-26178 [HIGH] CWE-190 CVE-2026-26178: Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized att Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-21255P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.83892026-02-10
CVE-2026-21255 [HIGH] CWE-284 CVE-2026-21255: Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security featur Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-108471P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-108471 [HIGH] CWE-184 CVE-2026-108471: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-20652P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.5329≥ 10.0.0, < 10.0.17763.53292024-01-09
CVE-2024-20652 [HIGH] CWE-73 CVE-2024-20652: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2026-83728P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13
CVE-2026-83728 [HIGH] CWE-1286 CVE-2026-83728: Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attack Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
nvd
CVE-2022-35794P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.3287≥ 10.0.0, < 10.0.17763.32872022-08-09
CVE-2022-35794 [HIGH] CVE-2022-35794: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
← Previous64 / 266Next →
Microsoft Windows 10 Version 1809 vulnerabilities | cvebase