Microsoft Windows 10 1607 vulnerabilities
1,753 known vulnerabilities affecting microsoft/windows_10_1607.
Total CVEs
1,753
CISA KEV
87
actively exploited
Public exploits
53
Exploited in wild
98
Severity breakdown
CRITICAL61HIGH1246MEDIUM437LOW9
Vulnerabilities
Page 19 of 88
CVE-2024-21365P3HIGHCVSS 8.8fixed in 10.0.14393.67092024-02-13
CVE-2024-21365 [HIGH] CWE-122 CVE-2024-21365: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21420P3HIGHCVSS 8.8fixed in 10.0.14393.6709≤ 10.0.14393.67092024-02-13
CVE-2024-21420 [HIGH] CWE-190 CVE-2024-21420: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-30097P3HIGHCVSS 8.8fixed in 10.0.14393.70702024-06-11
CVE-2024-30097 [HIGH] CWE-415 CVE-2024-30097: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
nvd
CVE-2024-30006P3HIGHCVSS 8.8fixed in 10.0.14393.69812024-05-14
CVE-2024-30006 [HIGH] CWE-416 CVE-2024-30006: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21349P3HIGHCVSS 8.8fixed in 10.0.14393.67092024-02-13
CVE-2024-21349 [HIGH] CWE-122 CVE-2024-21349: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
nvd
CVE-2025-24056P3HIGHCVSS 8.8fixed in 10.0.14393.78762025-03-11
CVE-2025-24056 [HIGH] CWE-122 CVE-2025-24056: Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute co
Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-43599P3HIGHCVSS 8.8fixed in 10.0.14393.74282024-10-08
CVE-2024-43599 [HIGH] CWE-416 CVE-2024-43599: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-21222P3HIGHCVSS 8.8fixed in 10.0.14393.79692025-04-08
CVE-2025-21222 [HIGH] CWE-122 CVE-2025-21222: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21221P3HIGHCVSS 8.8fixed in 10.0.14393.79692025-04-08
CVE-2025-21221 [HIGH] CWE-122 CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21205P3HIGHCVSS 8.8fixed in 10.0.14393.79692025-04-08
CVE-2025-21205 [HIGH] CWE-122 CVE-2025-21205: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29966P3HIGHCVSS 8.8fixed in 10.0.14393.80662025-05-13
CVE-2025-29966 [HIGH] CWE-122 CVE-2025-29966: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21417P3HIGHCVSS 8.8fixed in 10.0.14393.76992025-01-14
CVE-2025-21417 [HIGH] CWE-122 CVE-2025-21417: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21409P3HIGHCVSS 8.8fixed in 10.0.14393.76992025-01-14
CVE-2025-21409 [HIGH] CWE-122 CVE-2025-21409: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21339P3HIGHCVSS 8.8fixed in 10.0.14393.76992025-01-14
CVE-2025-21339 [HIGH] CWE-122 CVE-2025-21339: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21411P3HIGHCVSS 8.8fixed in 10.0.14393.76992025-01-14
CVE-2025-21411 [HIGH] CWE-122 CVE-2025-21411: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21413P3HIGHCVSS 8.8fixed in 10.0.14393.76992025-01-14
CVE-2025-21413 [HIGH] CWE-122 CVE-2025-21413: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-48817P3HIGHCVSS 8.8fixed in 10.0.14393.82462025-07-08
CVE-2025-48817 [HIGH] CWE-23 CVE-2025-48817: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code ove
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-20820P3HIGHCVSS 7.8fixed in 10.0.14393.87832026-01-13
CVE-2026-20820 [HIGH] CWE-122 CVE-2026-20820: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54916P3HIGHCVSS 7.8fixed in 10.0.14393.84222025-09-09
CVE-2025-54916 [HIGH] CWE-121 CVE-2025-54916: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-20856P3HIGHCVSS 8.1fixed in 10.0.14393.87832026-01-13
CVE-2026-20856 [HIGH] CWE-20 CVE-2026-20856: Improper input validation in Windows Server Update Service allows an unauthorized attacker to execut
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
nvd