Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1809

Is your version affected?

CVE Summary Score Published
CVE-2026-23667 Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally 7.0 High Mar 10, 2026
CVE-2026-20846 Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network 7.5 High Feb 10, 2026
CVE-2026-21222 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Feb 10, 2026
CVE-2026-21231 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows… 7.8 High Feb 10, 2026
CVE-2026-21238 Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 High Feb 10, 2026
CVE-2026-21239 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Feb 10, 2026
CVE-2026-21240 Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate… 7.8 High Feb 10, 2026
CVE-2026-21244 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 7.3 High Feb 10, 2026
CVE-2026-21249 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally 3.3 Low Feb 10, 2026
CVE-2026-21253 Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally 7.0 High Feb 10, 2026
CVE-2026-21255 Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally 8.8 High Feb 10, 2026
CVE-2026-21508 Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally 7.0 High Feb 10, 2026
CVE-2026-21525 Exploited Microsoft Windows NULL Pointer Dereference Vulnerability 6.2 Medium Feb 10, 2026
CVE-2026-21510 Exploited Microsoft Windows Shell Protection Mechanism Failure Vulnerability 8.8 High Feb 10, 2026
CVE-2026-21513 Exploited Microsoft Internet Explorer Protection Mechanism Failure Vulnerability 8.8 High Feb 10, 2026
CVE-2026-21533 Exploited Microsoft Windows Improper Privilege Management Vulnerability 7.8 High Feb 10, 2026
CVE-2026-21236 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 High Feb 10, 2026
CVE-2026-21235 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.3 High Feb 10, 2026
CVE-2026-21234 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices… 7.0 High Feb 10, 2026
CVE-2026-21246 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.8 High Feb 10, 2026
CVE-2026-21247 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally 7.3 High Feb 10, 2026
CVE-2026-21248 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 7.3 High Feb 10, 2026
CVE-2026-21519 Exploited Microsoft Windows Type Confusion Vulnerability 7.8 High Feb 10, 2026
CVE-2026-20937 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to… 5.5 Medium Jan 13, 2026
CVE-2026-20939 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to… 5.5 Medium Jan 13, 2026

Other Microsoft products