Microsoft Windows 10

Name: Microsoft Windows 10
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical123high99medium4low

updated 2026-10-26

vulnerabilities (563)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-8174US	high7.5OT critical	88.2% (100th)	KEV	no fix	2018-05-09	10 versions
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2018-8414US	high8.8OT critical	72.6% (99th)	KEV	no fix	2018-08-15	6 versions
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2018-8453US	high7.8OT critical	70.0% (99th)	KEV	no fix	2018-10-10	12 versions
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2018-8639US	high7.8OT critical	22.2% (98th)	KEV	no fix	2018-12-12	15 versions
CVE-2018-8440US	high7.8OT critical	18.5% (97th)	KEV	no fix	2018-09-13	10 versions
CVE-2018-8611US	high7.8OT critical	4.20% (91st)	KEV	no fix	2018-12-12	15 versions
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2018-8406US	high7.8OT critical	3.44% (89th)	KEV	no fix	2018-08-15	10 versions
CVE-2018-8405US	high7.8OT critical	3.44% (89th)	KEV	no fix	2018-08-15	10 versions
CVE-2025-24993US	—OT critical	2.22% (83rd)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2025-24991US	—OT critical	2.02% (81st)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2025-24984US	—OT critical	1.99% (81st)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2025-24983US	—OT critical	1.87% (79th)	KEV	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2018-8495US	high7.5	50.7% (99th)	Exploit	no fix	2018-10-10	8 versions
CVE-2018-8420US	high8.8	48.9% (99th)	Exploit	no fix	2018-09-13	10 versions
CVE-2018-8544US	high8.8	47.6% (99th)	Exploit	no fix	2018-11-14	15 versions
CVE-2018-8413US	high7.8	46.3% (99th)	Exploit	no fix	2018-10-10	12 versions
CVE-2025-54918US	—	25.3% (98th)	Exploit	no fix	2025-09-09	≤ vers:unknown/*
CVE-2019-0572US	high7.8	25.1% (98th)	Exploit	no fix	2019-01-08	15 versions
CVE-2025-24071US	—	23.3% (98th)	Exploit	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2025-55234US	critical9.8	20.6% (98th)	Exploit	no fix	2025-09-09	≤ vers:unknown/*
CVE-2019-0573US	high7.8OT high	20.1% (97th)	Exploit	no fix	2019-01-08	15 versions
CVE-2019-0574US	high7.8	19.4% (97th)	Exploit	no fix	2019-01-08	15 versions
CVE-2019-0571US	high7.8	15.8% (97th)	Exploit	no fix	2019-01-08	15 versions
CVE-2018-8468US	medium4.7	11.8% (96th)	Exploit	no fix	2018-09-13	10 versions
CVE-2018-0959US	high7.6	9.80% (96th)	Exploit	no fix	2018-05-09	5 versions
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2018-0952US	high7.8	6.23% (93rd)	Exploit	no fix	2018-08-15	10 versions
CVE-2026-50507US	—OT elevated	5.02% (92nd)	Exploit	no fix	2026-06-09	≤ vers:unknown/*
CVE-2025-54110US	—	4.72% (92nd)	Exploit	no fix	2025-09-09	≤ vers:unknown/*
CVE-2018-8410US	high7.8	3.98% (90th)	Exploit	no fix	2018-09-13	10 versions
CVE-2018-0968US	medium5.5	3.55% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2018-0974US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-0973US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-0972US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-0971US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-0970US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-0969US	medium5.5	3.44% (89th)	Exploit	no fix	2018-04-12	10 versions
CVE-2018-8214US	high7.0	3.24% (88th)	Exploit	no fix	2018-06-14	8 versions
CVE-2025-24076US	—	3.21% (88th)	Exploit	10.0.10240.20947	2025-03-11	< 10.0.10240.20947
CVE-2018-8208US	high7.0	3.11% (88th)	Exploit	no fix	2018-06-14	8 versions
CVE-2018-8449US	low3.3	3.11% (88th)	Exploit	no fix	2018-09-13	10 versions
CVE-2018-8411US	high7.8	3.07% (88th)	Exploit	no fix	2018-10-10	12 versions
CVE-2019-0570US	high7.8	3.00% (87th)	Exploit	no fix	2019-01-08	15 versions

showing 50 of 563

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free111 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')59 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor58 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer56 CVEs
CWE-20Improper Input Validation47 CVEs
CWE-122Heap-based Buffer Overflow40 CVEs
CWE-404Improper Resource Shutdown or Release39 CVEs
CWE-125Out-of-bounds Read36 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)311 CVEs
EUEU Vulnerability Database (ENISA)214 CVEs
DECERT-Bund (BSI CSAF)37 CVEs
USCISA CSAF IT advisories1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan