Microsoft Windows 10 1607 vulnerabilities

CVE-2026-40408 [HIGH] CWE-416 CVE-2026-40408: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-27915 [HIGH] CWE-416 CVE-2026-27915: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-26162 [HIGH] CWE-843 CVE-2026-26162: Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized at Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-26163 [HIGH] CWE-415 CVE-2026-26163: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85872 [HIGH] CWE-416 CVE-2026-85872: Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-38019 [HIGH] CWE-190 CVE-2024-38019: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2026-85376 [HIGH] CWE-1390 CVE-2026-85376: Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-50358 [HIGH] CWE-416 CVE-2026-50358: Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50476 [HIGH] CWE-416 CVE-2026-50476: Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-57093 [HIGH] CWE-416 CVE-2026-57093: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

CVE-2026-88080 [HIGH] CWE-416 CVE-2026-88080: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85334 [HIGH] CWE-125 CVE-2026-85334: Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

CVE-2026-103558 [HIGH] CWE-833 CVE-2026-103558: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2026-77896 [HIGH] CWE-190 CVE-2026-77896: Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny serv Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVE-2023-35386 [HIGH] CWE-125 CVE-2023-35386: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability