Microsoft Windows 10 1607 vulnerabilities

CVE-2026-50431 [MEDIUM] CWE-200 CVE-2026-50431: Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

CVE-2025-59209 [MEDIUM] CWE-200 CVE-2025-59209: Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.

CVE-2023-28251 [MEDIUM] CVE-2023-28251: Windows Driver Revocation List Security Feature Bypass Vulnerability Windows Driver Revocation List Security Feature Bypass Vulnerability

CVE-2024-21362 [MEDIUM] CWE-367 CVE-2024-21362: Windows Kernel Security Feature Bypass Vulnerability Windows Kernel Security Feature Bypass Vulnerability

CVE-2026-32217 [MEDIUM] CWE-532 CVE-2026-32217: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-27930 [MEDIUM] CWE-125 CVE-2026-27930: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-61928 [MEDIUM] CWE-312 CVE-2026-61928: Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

CVE-2025-21219 [MEDIUM] CWE-41 CVE-2025-21219: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21189 [MEDIUM] CWE-41 CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability

CVE-2026-83774 [MEDIUM] CWE-497 CVE-2026-83774: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83925 [MEDIUM] CWE-497 CVE-2026-83925: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-83905 [MEDIUM] CWE-497 CVE-2026-83905: Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-83897 [MEDIUM] CWE-497 CVE-2026-83897: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70077 [MEDIUM] CWE-416 CVE-2026-70077: Use after free in Windows Kernel allows an authorized attacker to disclose information locally. Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-69316 [MEDIUM] CWE-126 CVE-2026-69316: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-73019 [MEDIUM] CWE-41 CVE-2026-73019: Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to by Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

CVE-2025-24992 [MEDIUM] CWE-126 CVE-2025-24992: Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

CVE-2024-38256 [MEDIUM] CWE-908 CVE-2024-38256: Windows Kernel-Mode Driver Information Disclosure Vulnerability Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2025-32720 [MEDIUM] CWE-125 CVE-2025-32720: Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-53803 [MEDIUM] CWE-209 CVE-2025-53803: Generation of error message containing sensitive information in Windows Kernel allows an authorized Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.