Microsoft Windows 10 1607 vulnerabilities
2,839 known vulnerabilities affecting microsoft/windows_10_1607.
Total CVEs
2,839
CISA KEV
91
actively exploited
Public exploits
54
Exploited in wild
102
Severity breakdown
CRITICAL118HIGH2008MEDIUM704LOW9
Vulnerabilities
Page 13 of 142
CVE-2026-73009P2CRITICALCVSS 9.8fixed in 10.0.14393.95122026-09-08
CVE-2026-73009 [CRITICAL] CWE-416 CVE-2026-73009: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69276P2CRITICALCVSS 9.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69276 [CRITICAL] CWE-122 CVE-2026-69276: Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69730P2CRITICALCVSS 9.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69730 [CRITICAL] CWE-416 CVE-2026-69730: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69586P2CRITICALCVSS 9.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69586 [CRITICAL] CWE-122 CVE-2026-69586: Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute c
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69408P2CRITICALCVSS 9.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69408 [CRITICAL] CWE-122 CVE-2026-69408: Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56159P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-56159 [CRITICAL] CWE-122 CVE-2026-56159: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42990P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-42990 [CRITICAL] CWE-122 CVE-2026-42990: Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50518P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-50518 [CRITICAL] CWE-122 CVE-2026-50518: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50447P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-50447 [CRITICAL] CWE-122 CVE-2026-50447: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83935P2CRITICALCVSS 9.8fixed in 10.0.14393.96122026-10-13
CVE-2026-83935 [CRITICAL] CWE-122 CVE-2026-83935: Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97815P2CRITICALCVSS 9.8fixed in 10.0.14393.96122026-10-13
CVE-2026-97815 [CRITICAL] CWE-122 CVE-2026-97815: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58594P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-58594 [CRITICAL] CWE-190 CVE-2026-58594: Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50694P2CRITICALCVSS 9.8fixed in 10.0.14393.93392026-07-14
CVE-2026-50694 [CRITICAL] CWE-416 CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-47984P3HIGHCVSS 7.5fixed in 10.0.14393.82462025-07-08
CVE-2025-47984 [HIGH] CWE-693 CVE-2025-47984: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38104P2HIGHCVSS 8.8fixed in 10.0.14393.71592024-07-09
CVE-2024-38104 [HIGH] CWE-822 CVE-2024-38104: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2024-49080P2HIGHCVSS 8.8fixed in 10.0.14393.76062024-12-12
CVE-2024-49080 [HIGH] CWE-122 CVE-2024-49080: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2025-21376P3HIGHCVSS 8.1fixed in 10.0.14393.77852025-02-11
CVE-2025-21376 [HIGH] CWE-122 CVE-2025-21376: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-20868P2HIGHCVSS 8.8fixed in 10.0.14393.87832026-01-13
CVE-2026-20868 [HIGH] CWE-122 CVE-2026-20868: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-28220P3HIGHCVSS 8.1fixed in 10.0.14393.58502023-04-11
CVE-2023-28220 [HIGH] CWE-591 CVE-2023-28220: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-28219P3HIGHCVSS 8.1fixed in 10.0.14393.58502023-04-11
CVE-2023-28219 [HIGH] CWE-591 CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd