Windows 10 1909

CVEs (4,279)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-1365	Microsoft IIS Server	Cri	0.65	9.9	0.04		Oct 10, 2019	An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the…
CVE-2019-1182	Microsoft Remote Desktop Services	Cri	0.65	9.8	0.17		Aug 14, 2019	A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…
CVE-2018-8626	Microsoft Windows Server 2012	Cri	0.65	9.8	0.21		Dec 12, 2018	A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10,…
CVE-2025-53766	Microsoft Windows GDI+	Cri	0.64	9.8	0.07		Aug 12, 2025	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2025-21307	Microsoft Windows Reliable Multicast Transport Driver (RMCAST)	Cri	0.64	9.8	0.02		Jan 14, 2025	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-38199	Microsoft Windows Line Printer Daemon (LPD) Service	Cri	0.64	9.8	0.02		Aug 13, 2024	Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2024-38178	Microsoft Scripting Engine	Hig	0.64	7.5	0.41	KEV	Aug 13, 2024	Scripting Engine Memory Corruption Vulnerability
CVE-2024-38140	Microsoft Windows Reliable Multicast Transport Driver (RMCAST)	Cri	0.64	9.8	0.04		Aug 13, 2024	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-21351	Microsoft Windows SmartScreen	Hig	0.64	7.6	0.30	KEV	Feb 13, 2024	Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36424	Microsoft Windows Common Log File System Driver	Hig	0.64	7.8	0.12	KEV	Nov 14, 2023	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036	Microsoft Windows Cloud Files Mini Filter Driver	Hig	0.64	7.8	0.17	KEV	Nov 14, 2023	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36028	Microsoft Protected Extensible Authentication Protocol (PEAP)	Cri	0.64	9.8	0.03		Nov 14, 2023	Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36434	Microsoft IIS Server	Cri	0.64	9.8	0.02		Oct 10, 2023	Windows IIS Server Elevation of Privilege Vulnerability
CVE-2023-35349	Microsoft Message Queuing	Cri	0.64	9.8	0.03		Oct 10, 2023	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36911	Microsoft Message Queuing	Cri	0.64	9.8	0.02		Aug 8, 2023	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910	Microsoft Message Queuing	Cri	0.64	9.8	0.03		Aug 8, 2023	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35385	Microsoft Message Queuing	Cri	0.64	9.8	0.02		Aug 8, 2023	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35367	Microsoft Windows Routing and Remote Access Service (RRAS)	Cri	0.64	9.8	0.02		Jul 11, 2023	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35366	Microsoft Windows Routing and Remote Access Service (RRAS)	Cri	0.64	9.8	0.02		Jul 11, 2023	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35365	Microsoft Windows Routing and Remote Access Service (RRAS)	Cri	0.64	9.8	0.02		Jul 11, 2023	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2019-1365CriOct 10, 2019
Microsoft
IIS Server
risk 0.65cvss 9.9epss 0.04
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the…
CVE-2019-1182CriAug 14, 2019
Microsoft
Remote Desktop Services
risk 0.65cvss 9.8epss 0.17
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and…
CVE-2018-8626CriDec 12, 2018
Microsoft
Windows Server 2012
risk 0.65cvss 9.8epss 0.21
A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10,…
CVE-2025-53766CriAug 12, 2025
Microsoft
Windows GDI+
risk 0.64cvss 9.8epss 0.07
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2025-21307CriJan 14, 2025
Microsoft
Windows Reliable Multicast Transport Driver (RMCAST)
risk 0.64cvss 9.8epss 0.02
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-38199CriAug 13, 2024
Microsoft
Windows Line Printer Daemon (LPD) Service
risk 0.64cvss 9.8epss 0.02
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2024-38178HigKEVAug 13, 2024
Microsoft
Scripting Engine
risk 0.64cvss 7.5epss 0.41
Scripting Engine Memory Corruption Vulnerability
CVE-2024-38140CriAug 13, 2024
Microsoft
Windows Reliable Multicast Transport Driver (RMCAST)
risk 0.64cvss 9.8epss 0.04
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-21351HigKEVFeb 13, 2024
Microsoft
Windows SmartScreen
risk 0.64cvss 7.6epss 0.30
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36424HigKEVNov 14, 2023
Microsoft
Windows Common Log File System Driver
risk 0.64cvss 7.8epss 0.12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036HigKEVNov 14, 2023
Microsoft
Windows Cloud Files Mini Filter Driver
risk 0.64cvss 7.8epss 0.17
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36028CriNov 14, 2023
Microsoft
Protected Extensible Authentication Protocol (PEAP)
risk 0.64cvss 9.8epss 0.03
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36434CriOct 10, 2023
Microsoft
IIS Server
risk 0.64cvss 9.8epss 0.02
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2023-35349CriOct 10, 2023
Microsoft
Message Queuing
risk 0.64cvss 9.8epss 0.03
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36911CriAug 8, 2023
Microsoft
Message Queuing
risk 0.64cvss 9.8epss 0.02
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910CriAug 8, 2023
Microsoft
Message Queuing
risk 0.64cvss 9.8epss 0.03
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35385CriAug 8, 2023
Microsoft
Message Queuing
risk 0.64cvss 9.8epss 0.02
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35367CriJul 11, 2023
Microsoft
Windows Routing and Remote Access Service (RRAS)
risk 0.64cvss 9.8epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35366CriJul 11, 2023
Microsoft
Windows Routing and Remote Access Service (RRAS)
risk 0.64cvss 9.8epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35365CriJul 11, 2023
Microsoft
Windows Routing and Remote Access Service (RRAS)
risk 0.64cvss 9.8epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Page 7 of 214