Microsoft Windows 10 1607 vulnerabilities
3,170 known vulnerabilities affecting microsoft/windows_10_1607.
Total CVEs
3,170
CISA KEV
91
actively exploited
Public exploits
54
Exploited in wild
102
Severity breakdown
CRITICAL133HIGH2251MEDIUM777LOW9
Vulnerabilities
Page 59 of 159
CVE-2026-62761P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62761 [HIGH] CWE-59 CVE-2026-62761: Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62803P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62803 [HIGH] CWE-59 CVE-2026-62803: Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62812P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62812 [HIGH] CWE-59 CVE-2026-62812: Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62807P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62807 [HIGH] CWE-59 CVE-2026-62807: Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85945P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83859P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83499P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-83499 [HIGH] CWE-1220 CVE-2026-83499: Insufficient granularity of access control in Windows Server Update Service allows an authorized att
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-81969P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-81969 [HIGH] CWE-1220 CVE-2026-81969: Insufficient granularity of access control in Windows Server Update Service allows an authorized att
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83912P3HIGHCVSS 7.8fixed in 10.0.14393.96122026-10-13
CVE-2026-83912 [HIGH] CWE-416 CVE-2026-83912: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71345P3HIGHCVSS 7.8fixed in 10.0.14393.95122026-09-08
CVE-2026-71345 [HIGH] CWE-787 CVE-2026-71345: Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-69270P3HIGHCVSS 7.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69270 [HIGH] CWE-20 CVE-2026-69270: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69307P3HIGHCVSS 7.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69307 [HIGH] CWE-122 CVE-2026-69307: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69576P3HIGHCVSS 7.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69576 [HIGH] CWE-416 CVE-2026-69576: Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69571P3HIGHCVSS 7.8fixed in 10.0.14393.95122026-09-08
CVE-2026-69571 [HIGH] CWE-122 CVE-2026-69571: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65775P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-65775 [HIGH] CWE-416 CVE-2026-65775: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62707P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62707 [HIGH] CWE-416 CVE-2026-62707: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62711P3HIGHCVSS 7.8fixed in 10.0.14393.94182026-08-11
CVE-2026-62711 [HIGH] CWE-416 CVE-2026-62711: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58632P3HIGHCVSS 7.8fixed in 10.0.14393.93392026-07-14
CVE-2026-58632 [HIGH] CWE-416 CVE-2026-58632: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd