Windows 10 1809
by Microsoft
CVEs (3,332)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-49708 | 0.00 | — | 0.01 | Oct 14, 2025 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. | |||
| CVE-2025-59242 | 0.00 | — | 0.00 | Oct 14, 2025 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59211 | 0.00 | — | 0.01 | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally. | |||
| CVE-2025-59207 | 0.00 | — | 0.00 | Oct 14, 2025 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59204 | 0.00 | — | 0.00 | Oct 14, 2025 | Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally. | |||
| CVE-2025-59202 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59201 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59200 | 0.00 | — | 0.01 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally. | |||
| CVE-2025-59199 | 0.00 | — | 0.04 | Oct 14, 2025 | Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59196 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59195 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally. | |||
| CVE-2025-59185 | 0.00 | — | 0.01 | Oct 14, 2025 | External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network. | |||
| CVE-2025-58735 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | |||
| CVE-2025-58732 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | |||
| CVE-2025-58728 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58722 | 0.00 | — | 0.02 | Oct 14, 2025 | Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58719 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58717 | 0.00 | — | 0.01 | Oct 14, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2025-58716 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58715 | 0.00 | — | 0.00 | Oct 14, 2025 | Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
- CVE-2025-49708Oct 14, 2025risk 0.00cvss —epss 0.01
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
- CVE-2025-59242Oct 14, 2025risk 0.00cvss —epss 0.00
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2025-59211Oct 14, 2025risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.
- CVE-2025-59207Oct 14, 2025risk 0.00cvss —epss 0.00
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2025-59204Oct 14, 2025risk 0.00cvss —epss 0.00
Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.
- CVE-2025-59202Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2025-59201Oct 14, 2025risk 0.00cvss —epss 0.00
Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
- CVE-2025-59200Oct 14, 2025risk 0.00cvss —epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
- CVE-2025-59199Oct 14, 2025risk 0.00cvss —epss 0.04
Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
- CVE-2025-59196Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-59195Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
- CVE-2025-59185Oct 14, 2025risk 0.00cvss —epss 0.01
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-58735Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- CVE-2025-58732Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- CVE-2025-58728Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-58722Oct 14, 2025risk 0.00cvss —epss 0.02
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.
- CVE-2025-58719Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
- CVE-2025-58717Oct 14, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-58716Oct 14, 2025risk 0.00cvss —epss 0.00
Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2025-58715Oct 14, 2025risk 0.00cvss —epss 0.00
Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Page 127 of 167