Microsoft Windows 10 1809 vulnerabilities

CVE-2026-73000 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72999 Medium · 6.8 CWE-125 Sep 8, 2026

Windows USB Hub Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72997 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72996 High · 7.8 CWE-20 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72995 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72994 High · 7.8 CWE-20 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72993 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72992 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72991 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72990 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72989 High · 7.5 CWE-908 Sep 8, 2026

Windows Failover Cluster Information Disclosure Vulnerability

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

CVE-2026-72988 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72987 High · 8.1 CWE-416 Sep 8, 2026

Windows DNS Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-72986 High · 8.8 CWE-122 Sep 8, 2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-72985 Medium · 6.8 CWE-122 Sep 8, 2026

Volume Shadow Copy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72983 Critical · 9.8 CWE-416 Sep 8, 2026

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

CVE-2026-72982 Critical · 9.8 CWE-121 Sep 8, 2026

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CVE-2026-72981 High · 8.1 CWE-416 Sep 8, 2026

IP Helper Remote Code Execution Vulnerability

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVE-2026-72980 Medium · 5.5 CWE-427 Sep 8, 2026

Windows Hello Security Feature Bypass Vulnerability

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-72979 Critical · 9.8 CWE-416 Sep 8, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-72978 High · 7.5 CWE-770 Sep 8, 2026

Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-72967 High · 7.8 CWE-122 Sep 8, 2026

Windows Network Connection Broker Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-72966 Medium · 5.5 CWE-862 Sep 8, 2026

Windows Remote Access Connection Manager Tampering Vulnerability

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-72965 High · 7.8 CWE-416 Sep 8, 2026

Windows WebClient Service Elevation of Privilege Vulnerability

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72964 Medium · 5.5 CWE-306 Sep 8, 2026

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.