Windows 10
7,936 CVEs tracked. 196 of them are in CISA KEV.
This hub aggregates every CVE we track for Windows 10, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Windows 10 CVEs per month
| Month | CVEs |
|---|---|
| 2024-12 | 45 |
| 2025-01 | 122 |
| 2025-02 | 31 |
| 2025-03 | 34 |
| 2025-04 | 65 |
| 2025-05 | 36 |
| 2025-06 | 37 |
| 2025-07 | 75 |
| 2025-08 | 51 |
| 2025-09 | 48 |
| 2025-10 | 95 |
| 2025-11 | 35 |
| 2025-12 | 31 |
| 2026-01 | 71 |
| 2026-02 | 24 |
| 2026-03 | 44 |
| 2026-04 | 105 |
| 2026-05 | 54 |
| 2026-06 | 93 |
| 2026-07 | 334 |
| 2026-08 | 190 |
| 2026-09 | 642 |
| 2026-10 | 958 |
| 2026-11 | 606 |
Severity
How the 7,936 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical216
- High5,490
- Medium2,185
- Low45
Latest CVEs
The 15 most recently published vulnerabilities affecting Windows 10.
- CVE-2026-118148Active Directory Domain Services Elevation of Privilege Vulnerability7.5
- CVE-2026-119382Windows TPM Elevation of Privilege Vulnerability7.8
- CVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability5.9
- CVE-2026-122183Windows Kernel Elevation of Privilege Vulnerability7.8
- CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5
- CVE-2026-122182Windows Maps Elevation of Privilege Vulnerability7.0
- CVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0
- CVE-2026-122177Windows iSCSI Elevation of Privilege Vulnerability7.5
- CVE-2026-122176Windows SMB Remote Code Execution Vulnerability8.8
- CVE-2026-122174Windows Task Scheduler Elevation of Privilege Vulnerability7.0
- CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability6.8
- CVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8
- CVE-2026-122171Microsoft XPS Document Converter Remote Code Execution Vulnerability8.8
- CVE-2026-122170Windows Win32k Elevation of Privilege Vulnerability7.0
- CVE-2026-122169Windows IKE Extension Spoofing Vulnerability7.5
Product grouping is registry-driven, with AI assist and human review. How it works