Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Microsoft

Microsoft Windows 10 vulnerabilities

214 published CVEs name Microsoft Windows 10 among the affected products; CISA lists 8 of them as exploited in the wild.

Known exploited

Newest addition to KEV first.

  • CVE-2018-8639

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows 7

    ExploitedHigh8.4
  • CVE-2018-8611

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…

    Microsoft · Windows 7

    ExploitedHigh7.8
  • CVE-2018-8440

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of…

    Microsoft · Windows 7

    ExploitedHigh7.8
  • CVE-2018-8405

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2012 R2

    ExploitedHigh7.8
  • CVE-2018-8406

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2016

    ExploitedHigh7.8
  • CVE-2018-8414

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution…

    Microsoft · Windows 10 Servers

    ExploitedHigh8.8
  • CVE-2018-8174

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution…

    Microsoft · Windows 7

    ExploitedHigh7.5
  • CVE-2018-8453

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows 7

    ExploitedHigh7.8