Microsoft Windows 10 1607 vulnerabilities

CVE-2026-62786 [MEDIUM] CWE-125 CVE-2026-62786: Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-62738 [MEDIUM] CWE-125 CVE-2026-62738: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-65784 [MEDIUM] CWE-125 CVE-2026-65784: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-50437 [MEDIUM] CWE-125 CVE-2026-50437: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83765 [MEDIUM] CWE-125 CVE-2026-83765: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83668 [MEDIUM] CWE-125 CVE-2026-83668: Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information loc Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

CVE-2026-85374 [MEDIUM] CWE-125 CVE-2026-85374: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-85830 [MEDIUM] CWE-125 CVE-2026-85830: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-42968 [MEDIUM] CWE-125 CVE-2026-42968: Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

CVE-2026-96860 [MEDIUM] CWE-125 CVE-2026-96860: Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96927 [MEDIUM] CWE-125 CVE-2026-96927: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-32084 [MEDIUM] CWE-200 CVE-2026-32084: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-32079 [MEDIUM] CWE-200 CVE-2026-32079: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-34346 [MEDIUM] CWE-319 CVE-2026-34346: Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock all Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

CVE-2026-70071 [MEDIUM] CWE-347 CVE-2026-70071: Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perf Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-83798 [MEDIUM] CWE-20 CVE-2026-83798: Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

CVE-2025-21247 [MEDIUM] CWE-41 CVE-2025-21247: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-21249 [LOW] CWE-73 CVE-2026-21249: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

CVE-2026-83672 [MEDIUM] CWE-497 CVE-2026-83672: Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allo Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2025-21272 [MEDIUM] CWE-908 CVE-2025-21272: Windows COM Server Information Disclosure Vulnerability Windows COM Server Information Disclosure Vulnerability