Windows 10 1809
by Microsoft
CVEs (3,841)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-34722 | Cri | 0.64 | 9.8 | 0.02 | Sep 13, 2022 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-30133 | Cri | 0.64 | 9.8 | 0.03 | Aug 9, 2022 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | ||
| CVE-2022-22047 | Hig | 0.64 | 7.8 | 0.17 | KEV | Jul 12, 2022 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | |
| CVE-2022-29130 | Cri | 0.64 | 9.8 | 0.04 | May 10, 2022 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | ||
| CVE-2022-22012 | Cri | 0.64 | 9.8 | 0.04 | May 10, 2022 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | ||
| CVE-2022-22718 | Hig | 0.64 | 7.8 | 0.18 | KEV | Feb 9, 2022 | Windows Print Spooler Elevation of Privilege Vulnerability | |
| CVE-2022-21849 | Cri | 0.64 | 9.8 | 0.06 | Jan 11, 2022 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-43215 | Cri | 0.64 | 9.8 | 0.03 | Dec 15, 2021 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution | ||
| CVE-2021-36948 | Hig | 0.64 | 7.8 | 0.27 | KEV | Aug 12, 2021 | Windows Update Medic Service Elevation of Privilege Vulnerability | |
| CVE-2021-34484 | Hig | 0.64 | 7.8 | 0.22 | KEV | Aug 12, 2021 | Windows User Profile Service Elevation of Privilege Vulnerability | |
| CVE-2021-31956 | Hig | 0.64 | 7.8 | 0.20 | KEV | Jun 8, 2021 | Windows NTFS Elevation of Privilege Vulnerability | |
| CVE-2021-24077 | Cri | 0.64 | 9.8 | 0.03 | Feb 25, 2021 | Windows Fax Service Remote Code Execution Vulnerability | ||
| CVE-2020-0986 | Hig | 0.64 | 7.8 | 0.16 | KEV | Jun 9, 2020 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266,… | |
| CVE-2019-1226 | Cri | 0.64 | 9.8 | 0.08 | Aug 14, 2019 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and… | ||
| CVE-2019-1222 | Cri | 0.64 | 9.8 | 0.08 | Aug 14, 2019 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and… | ||
| CVE-2019-1212 | Cri | 0.64 | 9.8 | 0.07 | Aug 14, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote… | ||
| CVE-2019-0736 | Cri | 0.64 | 9.8 | 0.04 | Aug 14, 2019 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an… | ||
| CVE-2026-21533 | Hig | 0.63 | 7.8 | 0.04 | KEV | Feb 10, 2026 | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-21519 | Hig | 0.63 | 7.8 | 0.02 | KEV | Feb 10, 2026 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2025-62221 | Hig | 0.63 | 7.8 | 0.02 | KEV | Dec 9, 2025 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
- risk 0.64cvss 9.8epss 0.02
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- risk 0.64cvss 9.8epss 0.03
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
- risk 0.64cvss 7.8epss 0.17
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- risk 0.64cvss 9.8epss 0.04
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- risk 0.64cvss 9.8epss 0.04
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- risk 0.64cvss 7.8epss 0.18
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.64cvss 9.8epss 0.06
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- risk 0.64cvss 9.8epss 0.03
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
- risk 0.64cvss 7.8epss 0.27
Windows Update Medic Service Elevation of Privilege Vulnerability
- risk 0.64cvss 7.8epss 0.22
Windows User Profile Service Elevation of Privilege Vulnerability
- risk 0.64cvss 7.8epss 0.20
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.64cvss 9.8epss 0.03
Windows Fax Service Remote Code Execution Vulnerability
- risk 0.64cvss 7.8epss 0.16
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266,…
- risk 0.64cvss 9.8epss 0.08
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…
- risk 0.64cvss 9.8epss 0.08
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…
- risk 0.64cvss 9.8epss 0.07
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote…
- risk 0.64cvss 9.8epss 0.04
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an…
- risk 0.63cvss 7.8epss 0.04
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- risk 0.63cvss 7.8epss 0.02
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.63cvss 7.8epss 0.02
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Page 8 of 193