Windows 10 1809
by Microsoft
CVEs (3,332)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-62215 | 0.15 | — | 0.06 | KEV | Nov 11, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2023-32046 | 0.15 | — | 0.09 | KEV | Jul 11, 2023 | Windows MSHTML Platform Elevation of Privilege Vulnerability | ||
| CVE-2022-41128 | 0.15 | — | 0.25 | KEV | Nov 9, 2022 | Windows Scripting Languages Remote Code Execution Vulnerability | ||
| CVE-2022-26925 | 0.15 | — | 0.10 | KEV | May 10, 2022 | Windows LSA Spoofing Vulnerability | ||
| CVE-2021-34486 | 0.15 | — | 0.07 | KEV | Aug 12, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2026-21513 | 0.14 | — | 0.15 | KEV | Feb 10, 2026 | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-21533 | 0.14 | — | 0.04 | KEV | Feb 10, 2026 | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-38178 | 0.14 | — | 0.39 | KEV | Aug 13, 2024 | Scripting Engine Memory Corruption Vulnerability | ||
| CVE-2024-30040 | 0.14 | — | 0.04 | KEV | May 14, 2024 | Windows MSHTML Platform Security Feature Bypass Vulnerability | ||
| CVE-2023-29360 | 0.14 | — | 0.22 | KEV | Jun 13, 2023 | Microsoft Streaming Service Elevation of Privilege Vulnerability | ||
| CVE-2023-21674 | 0.14 | — | 0.42 | KEV | Jan 10, 2023 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | ||
| CVE-2020-17087 | 0.14 | — | 0.05 | KEV | Nov 11, 2020 | Windows Kernel Local Elevation of Privilege Vulnerability | ||
| CVE-2026-21525 | 0.13 | — | 0.05 | KEV | Feb 10, 2026 | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. | ||
| CVE-2025-21418 | 0.13 | — | 0.01 | KEV | Feb 11, 2025 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||
| CVE-2024-43573 | 0.13 | — | 0.44 | KEV | Oct 8, 2024 | Windows MSHTML Platform Spoofing Vulnerability | ||
| CVE-2024-43461 | 0.13 | — | 0.52 | KEV | Sep 10, 2024 | Windows MSHTML Platform Spoofing Vulnerability | ||
| CVE-2024-38217 | 0.13 | — | 0.10 | KEV | Sep 10, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability | ||
| CVE-2024-38014 | 0.13 | — | 0.06 | KEV | Sep 10, 2024 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2024-21351 | 0.13 | — | 0.30 | KEV | Feb 13, 2024 | Windows SmartScreen Security Feature Bypass Vulnerability | ||
| CVE-2023-36584 | 0.13 | — | 0.03 | KEV | Oct 10, 2023 | Windows Mark of the Web Security Feature Bypass Vulnerability |
- risk 0.15cvss —epss 0.06
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.15cvss —epss 0.09
Windows MSHTML Platform Elevation of Privilege Vulnerability
- risk 0.15cvss —epss 0.25
Windows Scripting Languages Remote Code Execution Vulnerability
- risk 0.15cvss —epss 0.10
Windows LSA Spoofing Vulnerability
- risk 0.15cvss —epss 0.07
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.14cvss —epss 0.15
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.14cvss —epss 0.04
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- risk 0.14cvss —epss 0.39
Scripting Engine Memory Corruption Vulnerability
- risk 0.14cvss —epss 0.04
Windows MSHTML Platform Security Feature Bypass Vulnerability
- risk 0.14cvss —epss 0.22
Microsoft Streaming Service Elevation of Privilege Vulnerability
- risk 0.14cvss —epss 0.42
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- risk 0.14cvss —epss 0.05
Windows Kernel Local Elevation of Privilege Vulnerability
- risk 0.13cvss —epss 0.05
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
- risk 0.13cvss —epss 0.01
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.13cvss —epss 0.44
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.13cvss —epss 0.52
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.13cvss —epss 0.10
Windows Mark of the Web Security Feature Bypass Vulnerability
- risk 0.13cvss —epss 0.06
Windows Installer Elevation of Privilege Vulnerability
- risk 0.13cvss —epss 0.30
Windows SmartScreen Security Feature Bypass Vulnerability
- risk 0.13cvss —epss 0.03
Windows Mark of the Web Security Feature Bypass Vulnerability
Page 17 of 167