Microsoft Windows 10 1607 vulnerabilities

CVE-2026-85336 [MEDIUM] CWE-125 CVE-2026-85336: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-88140 [MEDIUM] CWE-125 CVE-2026-88140: Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-85852 [MEDIUM] CWE-125 CVE-2026-85852: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-83760 [MEDIUM] CWE-125 CVE-2026-83760: Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose informati Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

CVE-2026-96846 [MEDIUM] CWE-125 CVE-2026-96846: Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-87698 [MEDIUM] CWE-125 CVE-2026-87698: Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

CVE-2026-45634 [MEDIUM] CWE-125 CVE-2026-45634: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information loca Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

CVE-2026-96935 [MEDIUM] CWE-497 CVE-2026-96935: Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-70288 [MEDIUM] CWE-367 CVE-2026-70288: Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-32212 [MEDIUM] CWE-59 CVE-2026-32212: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2026-69531 [MEDIUM] CWE-441 CVE-2026-69531: Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorize Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

CVE-2026-85320 [MEDIUM] CWE-908 CVE-2026-85320: Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-88162 [MEDIUM] CWE-863 CVE-2026-88162: Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2023-28226 [MEDIUM] CWE-347 CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability Windows Enroll Engine Security Feature Bypass Vulnerability

CVE-2026-83646 [MEDIUM] CWE-601 CVE-2026-83646: Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2026-24297 [MEDIUM] CWE-362 CVE-2026-24297: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.