Microsoft Windows 10 Version 1809 vulnerabilities

5,316 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

5,316

CISA KEV

122

actively exploited

Public exploits

101

Exploited in wild

162

Severity breakdown

CRITICAL185HIGH3827MEDIUM1290LOW14

Vulnerabilities

SortPage 82 of 266

CVE-2026-81355P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-81355 [HIGH] CWE-122 CVE-2026-81355: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

nvd

CVE-2026-48583P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.88802026-06-09

CVE-2026-48583 [HIGH] CWE-416 CVE-2026-48583: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26159P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.86442026-04-14

CVE-2026-26159 [HIGH] CWE-306 CVE-2026-26159: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2023-35644P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.5206≥ 10.0.0, < 10.0.17763.52062023-12-12

CVE-2023-35644 [HIGH] CWE-190 CVE-2023-35644: Windows Sysmain Service Elevation of Privilege Vulnerability Windows Sysmain Service Elevation of Privilege Vulnerability

nvd

CVE-2026-96245P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-96245 [HIGH] CWE-125 CVE-2026-96245: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-96246P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-96246 [HIGH] CWE-125 CVE-2026-96246: Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-26176P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.86442026-04-14

CVE-2026-26176 [HIGH] CWE-122 CVE-2026-26176: Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized atta Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-61924P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.91212026-08-11

CVE-2026-61924 [HIGH] CWE-125 CVE-2026-61924: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-61918P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.91212026-08-11

CVE-2026-61918 [HIGH] CWE-125 CVE-2026-61918: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-50504P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50504 [HIGH] CWE-126 CVE-2026-50504: Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information ov Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-50497P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50497 [HIGH] CWE-193 CVE-2026-50497: Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose info Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-97788P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-97788 [HIGH] CWE-203 CVE-2026-97788: Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2023-38142P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4851≥ 10.0.0, < 10.0.17763.48512023-09-12

CVE-2023-38142 [HIGH] CWE-190 CVE-2023-38142: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2026-69397P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-69397 [HIGH] CWE-416 CVE-2026-69397: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-42992P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.88802026-06-09

CVE-2026-42992 [HIGH] CWE-122 CVE-2026-42992: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-44799P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.88802026-06-09

CVE-2026-44799 [HIGH] CWE-122 CVE-2026-44799: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-96222P3HIGHCVSS 7.4≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-96222 [HIGH] CWE-295 CVE-2026-96222: Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthoriz Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2024-26182P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.5576≥ 10.0.0, < 10.0.17763.55762024-03-12

CVE-2024-26182 [HIGH] CWE-416 CVE-2024-26182: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2026-32161P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.87552026-05-12

CVE-2026-32161 [HIGH] CWE-362 CVE-2026-32161: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

nvd

CVE-2026-87713P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-87713 [HIGH] CWE-416 CVE-2026-87713: Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

nvd

← Previous82 / 266Next →