Microsoft Windows 10 1507 vulnerabilities
1,047 known vulnerabilities affecting microsoft/windows_10_1507.
Total CVEs
1,047
CISA KEV
74
actively exploited
Public exploits
44
Exploited in wild
83
Severity breakdown
CRITICAL32HIGH730MEDIUM280LOW5
Vulnerabilities
Page 35 of 53
CVE-2025-21251P3HIGHCVSS 7.5fixed in 10.0.10240.208902025-01-14
CVE-2025-21251 [HIGH] CWE-400 CVE-2025-21251: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-38132P3HIGHCVSS 7.5fixed in 10.0.10240.207512024-08-13
CVE-2024-38132 [HIGH] CWE-125 CVE-2024-38132: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2025-21289P3HIGHCVSS 7.5fixed in 10.0.10240.208902025-01-14
CVE-2025-21289 [HIGH] CWE-400 CVE-2025-21289: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21290P3HIGHCVSS 7.5fixed in 10.0.10240.208902025-01-14
CVE-2025-21290 [HIGH] CWE-400 CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21270P3HIGHCVSS 7.5fixed in 10.0.10240.208902025-01-14
CVE-2025-21270 [HIGH] CWE-400 CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-43565P3HIGHCVSS 7.5fixed in 10.0.10240.207962024-10-08
CVE-2024-43565 [HIGH] CWE-125 CVE-2024-43565: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2024-43562P3HIGHCVSS 7.5fixed in 10.0.10240.207962024-10-08
CVE-2024-43562 [HIGH] CWE-125 CVE-2024-43562: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2024-30093P3HIGHCVSS 7.3fixed in 10.0.10240.206802024-06-11
CVE-2024-30093 [HIGH] CWE-59 CVE-2024-30093: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2025-21331P3HIGHCVSS 7.3fixed in 10.0.10240.208902025-01-14
CVE-2025-21331 [HIGH] CWE-59 CVE-2025-21331: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-30050P3MEDIUMCVSS 5.4fixed in 10.0.10240.206512024-05-14
CVE-2024-30050 [MEDIUM] CWE-693 CVE-2024-30050: Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2023-24940P3HIGHCVSS 7.5fixed in 10.0.10240.199262023-05-09
CVE-2023-24940 [HIGH] CWE-476 CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
nvd
CVE-2025-53134P3HIGHCVSS 7.0fixed in 10.0.10240.211002025-08-12
CVE-2025-53134 [HIGH] CWE-200 CVE-2025-53134: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55678P3HIGHCVSS 7.0fixed in 10.0.10240.211612025-10-14
CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49762P3HIGHCVSS 7.0fixed in 10.0.10240.211002025-08-12
CVE-2025-49762 [HIGH] CWE-362 CVE-2025-49762: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59259P3MEDIUMCVSS 6.5fixed in 10.0.10240.211612025-10-14
CVE-2025-59259 [MEDIUM] CWE-1287 CVE-2025-59259: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-24996P3MEDIUMCVSS 6.5fixed in 10.0.10240.209472025-03-11
CVE-2025-24996 [MEDIUM] CWE-73 CVE-2025-24996: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36871P3MEDIUMCVSS 6.5fixed in 10.0.10240.200482023-07-11
CVE-2023-36871 [MEDIUM] CVE-2023-36871: Azure Active Directory Security Feature Bypass Vulnerability
Azure Active Directory Security Feature Bypass Vulnerability
nvd
CVE-2025-59185P3MEDIUMCVSS 6.5fixed in 10.0.10240.211612025-10-14
CVE-2025-59185 [MEDIUM] CWE-73 CVE-2025-59185: External control of file name or path in Windows Core Shell allows an unauthorized attacker to perfo
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-59244P3MEDIUMCVSS 6.5fixed in 10.0.10240.211612025-10-14
CVE-2025-59244 [MEDIUM] CWE-73 CVE-2025-59244: External control of file name or path in Windows Core Shell allows an unauthorized attacker to perfo
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-20661P3HIGHCVSS 7.5fixed in 10.0.10240.204022024-01-09
CVE-2024-20661 [HIGH] CWE-476 CVE-2024-20661: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd