CVE Intelligence

Microsoft Windows 10 1809 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows 10 1809: 2066 record(s), with affected versions and fixes.
cpe:2.3:o:microsoft:windows_10_1809

CVE-2026-88072 High · 7.8 CWE-59 Oct 13, 2026
Windows Host Guardian Service Elevation of Privilege Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88070 High · 7.8 CWE-125 Oct 13, 2026
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-87716 High · 7.5 CWE-122 Oct 13, 2026
Windows Storage Spaces Controller Denial of Service Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
CVE-2026-87715 High · 7.0 CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87714 Medium · 6.5 CWE-862 Oct 13, 2026
WebDAV Security Feature Bypass Vulnerability
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
CVE-2026-87713 High · 7.5 CWE-416 Oct 13, 2026
Windows Bluetooth Port Driver Remote Code Execution
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-87712 High · 7.8 CWE-416 Oct 13, 2026
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-87711 High · 7.8 CWE-121 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87710 High · 7.0 CWE-362 Oct 13, 2026
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-85926 High · 8.1 CWE-416 Oct 13, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-85920 High · 7.0 CWE-367 Oct 13, 2026
Windows BitLocker Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-85918 High · 7.0 CWE-416 Oct 13, 2026
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85915 High · 7.8 CWE-122 Oct 13, 2026
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85914 High · 7.0 CWE-416 Oct 13, 2026
Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85904 High · 7.0 CWE-362 Oct 13, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85903 High · 8.8 CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85902 High · 7.8 CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85901 High · 7.8 CWE-122 Oct 13, 2026
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85826 High · 7.0 CWE-787 Oct 13, 2026
Windows Fast FAT Driver Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85825 High · 7.0 CWE-362 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85822 High · 7.8 CWE-122 Oct 13, 2026
Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85821 Medium · 6.5 CWE-125 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85820 High · 7.8 CWE-122 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85817 High · 8.8 CWE-807 Oct 13, 2026
Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-85816 Medium · 5.7 CWE-125 Oct 13, 2026
Windows Wi-Fi Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.