# Microsoft Windows 10 Version 1909.

Every CVE that names Microsoft Windows 10 Version 1909 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30138.md)
  `CVE-2022-30138` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 May 2022
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29142.md)
  `CVE-2022-29142` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29141.md)
  `CVE-2022-29141` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29140.md)
  `CVE-2022-29140` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29139.md)
  `CVE-2022-29139` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29137.md)
  `CVE-2022-29137` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29132.md)
  `CVE-2022-29132` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29131.md)
  `CVE-2022-29131` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29130.md)
  `CVE-2022-29130` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29129.md)
  `CVE-2022-29129` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29128.md)
  `CVE-2022-29128` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-29127.md)
  `CVE-2022-29127` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 10 May 2022
- [Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29126.md)
  `CVE-2022-29126` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows Push Notifications Apps Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29125.md)
  `CVE-2022-29125` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows WLAN AutoConfig Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-29121.md)
  `CVE-2022-29121` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Fax Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29115.md)
  `CVE-2022-29115` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29114.md)
  `CVE-2022-29114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Digital Media Receiver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29113.md)
  `CVE-2022-29113` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29112.md)
  `CVE-2022-29112` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29105.md)
  `CVE-2022-29105` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29104.md)
  `CVE-2022-29104` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 10 May 2022
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29103.md)
  `CVE-2022-29103` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26936.md)
  `CVE-2022-26936` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows WLAN AutoConfig Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26935.md)
  `CVE-2022-26935` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26934.md)
  `CVE-2022-26934` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26933.md)
  `CVE-2022-26933` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26931.md)
  `CVE-2022-26931` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 May 2022
- [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26930.md)
  `CVE-2022-26930` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26927.md)
  `CVE-2022-26927` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Address Book Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26926.md)
  `CVE-2022-26926` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022 · Tags: Broken access control
- [Windows LSA Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2022-26925.md)
  `CVE-2022-26925` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 10 May 2022 · Tags: Authentication bypass
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26923.md)
  `CVE-2022-26923` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.83 · Not analysed yet · Published 10 May 2022 · Tags: Weak cryptography or TLS
- [Windows Authentication Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26913.md)
  `CVE-2022-26913` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.4 High · Not analysed yet · Published 10 May 2022
- [Windows Hyper-V Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-24466.md)
  `CVE-2022-24466` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 10 May 2022
- [Windows ALPC Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-23279.md)
  `CVE-2022-23279` · CVE record: Microsoft Windows 10 Version 1909 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-23270.md)
  `CVE-2022-23270` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.70 · Not analysed yet · Published 10 May 2022
- [Remote Procedure Call Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22019.md)
  `CVE-2022-22019` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows PlayToManager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22016.md)
  `CVE-2022-22016` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-22015.md)
  `CVE-2022-22015` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22014.md)
  `CVE-2022-22014` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22013.md)
  `CVE-2022-22013` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22012.md)
  `CVE-2022-22012` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-22011.md)
  `CVE-2022-22011` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21972.md)
  `CVE-2022-21972` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.79 · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-26920.md)
  `CVE-2022-26920` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26919.md)
  `CVE-2022-26919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 15 Apr 2022
- [Windows Fax Compose Form Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26918.md)
  `CVE-2022-26918` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Windows Fax Compose Form Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26917.md)
  `CVE-2022-26917` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Windows Fax Compose Form Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26916.md)
  `CVE-2022-26916` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Windows Secure Channel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-26915.md)
  `CVE-2022-26915` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Apr 2022
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26914.md)
  `CVE-2022-26914` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Windows User Profile Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26904.md)
  `CVE-2022-26904` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.17 · Not analysed yet · Published 15 Apr 2022 · Tags: Race condition
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26903.md)
  `CVE-2022-26903` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-26831.md)
  `CVE-2022-26831` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Apr 2022
- [Windows Bluetooth Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26828.md)
  `CVE-2022-26828` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 15 Apr 2022
- [Windows File Server Resource Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26827.md)
  `CVE-2022-26827` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 15 Apr 2022
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26826.md)
  `CVE-2022-26826` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.2 High · Not analysed yet · Published 15 Apr 2022 · Tags: Command injection
- [Windows File Server Resource Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26810.md)
  `CVE-2022-26810` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022
- [Remote Procedure Call Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-26809.md)
  `CVE-2022-26809` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.91 · Not analysed yet · Published 15 Apr 2022
- [Windows File Explorer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-26808.md)
  `CVE-2022-26808` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 15 Apr 2022

Older: <https://agentprime.io/advisories/technology/microsoft-windows-10-version-1909.md?cursor=WyIyMDIyLTA0LTE1VDE5OjA0OjQ4LjAwMDAwMFoiLCJDVkUtMjAyMi0yNjgwOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-10-version-1909>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-10-version-1909/>. Everything for agents: <https://agentprime.io/llms.txt>.