Microsoft Windows 10 Version 1809 vulnerabilities

5,316 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

5,316

CISA KEV

122

actively exploited

Public exploits

101

Exploited in wild

162

Severity breakdown

CRITICAL185HIGH3827MEDIUM1290LOW14

Vulnerabilities

SortPage 90 of 266

CVE-2026-103558P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-103558 [HIGH] CWE-833 CVE-2026-103558: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-88101P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-108131P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-108131 [HIGH] CWE-295 CVE-2026-108131: No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2026-50415P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50415 [HIGH] CWE-200 CVE-2026-50415: Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized a Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2023-35309P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.4645≥ 10.0.0, < 10.0.17763.46452023-07-11

CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

nvd

CVE-2026-77896P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-77896 [HIGH] CWE-190 CVE-2026-77896: Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny serv Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-60704P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.80272025-11-11

CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

nvd

CVE-2026-83739P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83739 [HIGH] CWE-416 CVE-2026-83739: Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

nvd

CVE-2023-35382P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4737≥ 10.0.0, < 10.0.17763.47372023-08-08

CVE-2023-35382 [HIGH] CWE-416 CVE-2023-35382: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2023-35386P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4737≥ 10.0.0, < 10.0.17763.47372023-08-08

CVE-2023-35386 [HIGH] CWE-125 CVE-2023-35386: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2023-21557P3CRITICALCVSS 9.1≥ 10.0.17763.0, < 10.0.17763.3887≥ 10.0.0, < 10.0.17763.38872023-01-10

CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

nvd

CVE-2022-35756P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.3287≥ 10.0.0, < 10.0.17763.32872023-05-31

CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

nvd

CVE-2026-69347P3HIGHCVSS 7.4≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-69347 [HIGH] CWE-122 CVE-2026-69347: Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

nvd

CVE-2024-38085P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.60542024-07-09

CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2022-21974P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.2565≥ 10.0.0, < 10.0.17763.25652022-02-09

CVE-2022-21974 [HIGH] CVE-2022-21974: Roaming Security Rights Management Services Remote Code Execution Vulnerability Roaming Security Rights Management Services Remote Code Execution Vulnerability

nvd

CVE-2024-30032P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.5820≥ 10.0.0, < 10.0.17763.58202024-05-14

CVE-2024-30032 [HIGH] CWE-416 CVE-2024-30032: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability

nvd

CVE-2024-20653P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.5329≥ 10.0.0, < 10.0.17763.53292024-01-09

CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability Microsoft Common Log File System Elevation of Privilege Vulnerability

nvd

CVE-2024-43629P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.65322024-11-12

CVE-2024-43629 [HIGH] CWE-822 CVE-2024-43629: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability

nvd

CVE-2020-0909P3HIGHCVSS 7.5≥ 10.0.17763.0, < publication2020-05-21

CVE-2020-0909 [HIGH] CVE-2020-0909: A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle s A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle

nvd

CVE-2023-38144P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.4851≥ 10.0.0, < 10.0.17763.48512023-09-12

CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

← Previous90 / 266Next →