Microsoft Windows 10 1607 vulnerabilities
2,869 known vulnerabilities affecting microsoft/windows_10_1607.
Total CVEs
2,869
CISA KEV
91
actively exploited
Public exploits
54
Exploited in wild
102
Severity breakdown
CRITICAL119HIGH2031MEDIUM710LOW9
Vulnerabilities
Page 43 of 144
CVE-2025-58726P3HIGHCVSS 7.5fixed in 10.0.14393.85192025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26158P3HIGHCVSS 7.8fixed in 10.0.14393.68972024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2026-87711P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38244P3HIGHCVSS 7.8fixed in 10.0.14393.73362024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-26634P3HIGHCVSS 7.5fixed in 10.0.14393.77852025-03-11
CVE-2025-26634 [HIGH] CWE-122 CVE-2025-26634: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69987P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69986P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69986 [HIGH] CWE-416 CVE-2026-69986: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69991P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69994P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69984P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69995P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69995 [HIGH] CWE-416 CVE-2026-69995: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69998P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69998 [HIGH] CWE-416 CVE-2026-69998: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70004P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-70004 [HIGH] CWE-416 CVE-2026-70004: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69996P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69996 [HIGH] CWE-416 CVE-2026-69996: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70012P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-70012 [HIGH] CWE-416 CVE-2026-70012: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69976P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69976 [HIGH] CWE-416 CVE-2026-69976: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69997P3HIGHCVSS 7.5fixed in 10.0.14393.96122026-10-13
CVE-2026-69997 [HIGH] CWE-416 CVE-2026-69997: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-28227P3HIGHCVSS 7.5fixed in 10.0.14393.58502023-04-11
CVE-2023-28227 [HIGH] CWE-122 CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability
Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36900P3HIGHCVSS 7.8fixed in 10.0.14393.61672023-08-08
CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-28275P3HIGHCVSS 8.8fixed in 10.0.14393.58502023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd