Microsoft Windows 10 Version 1809 vulnerabilities

5,316 known vulnerabilities affecting microsoft/windows_10_version_1809.

Total CVEs

5,316

CISA KEV

122

actively exploited

Public exploits

101

Exploited in wild

162

Severity breakdown

CRITICAL185HIGH3827MEDIUM1290LOW14

Vulnerabilities

SortPage 92 of 266

CVE-2022-30140P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.3046≥ 10.0.0, < 10.0.17763.30462022-06-15

CVE-2022-30140 [HIGH] CVE-2022-30140: Windows iSCSI Discovery Service Remote Code Execution Vulnerability Windows iSCSI Discovery Service Remote Code Execution Vulnerability

nvd

CVE-2025-49691P3HIGHCVSS 8.0≥ 10.0.17763.0, < 10.0.17763.75582025-07-08

CVE-2025-49691 [HIGH] CWE-122 CVE-2025-49691: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.

nvd

CVE-2024-38061P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.60542024-07-09

CVE-2024-38061 [HIGH] CWE-284 CVE-2024-38061: DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

nvd

CVE-2026-20846P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.83892026-02-10

CVE-2026-20846 [HIGH] CWE-126 CVE-2026-20846: Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-24995P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.70092025-03-11

CVE-2025-24995 [HIGH] CWE-122 CVE-2025-24995: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacke Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83665P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83665 [HIGH] CWE-476 CVE-2026-83665: Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-50173P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.76782025-08-12

CVE-2025-50173 [HIGH] CWE-1390 CVE-2025-50173: Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-70133P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-70133 [HIGH] CWE-770 CVE-2026-70133: Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-83647P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83647 [HIGH] CWE-125 CVE-2026-83647: Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny servi Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2022-24474P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.2803≥ 10.0.0, < 10.0.17763.28032022-04-15

CVE-2022-24474 [HIGH] CVE-2022-24474: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability

nvd

CVE-2026-50328P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50328 [HIGH] CWE-20 CVE-2026-50328: Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampe Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

nvd

CVE-2026-83645P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83645 [HIGH] CWE-770 CVE-2026-83645: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-83704P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.93762026-10-13

CVE-2026-83704 [HIGH] CWE-59 CVE-2026-83704: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58610P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-58610 [HIGH] CWE-122 CVE-2026-58610: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50362P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50362 [HIGH] CWE-122 CVE-2026-50362: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker t Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-54993P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-54993 [HIGH] CWE-122 CVE-2026-54993: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50462P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.90202026-07-14

CVE-2026-50462 [HIGH] CWE-73 CVE-2026-50462: External control of file name or path in Windows Ancillary Function Driver for WinSock allows an aut External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-68887P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-68887 [HIGH] CWE-125 CVE-2026-68887: Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-69329P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.92452026-09-08

CVE-2026-69329 [HIGH] CWE-125 CVE-2026-69329: Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-54113P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.91212026-08-11

CVE-2026-54113 [HIGH] CWE-770 CVE-2026-54113: Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attack Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

nvd

← Previous92 / 266Next →