Microsoft Windows 10 1607 vulnerabilities
3,176 known vulnerabilities affecting microsoft/windows_10_1607.
Total CVEs
3,176
CISA KEV
91
actively exploited
Public exploits
54
Exploited in wild
102
Severity breakdown
CRITICAL133HIGH2254MEDIUM780LOW9
Vulnerabilities
Page 97 of 159
CVE-2026-97842P3MEDIUMCVSS 6.5fixed in 10.0.14393.96122026-10-13
CVE-2026-97842 [MEDIUM] CWE-125 CVE-2026-97842: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69624P3MEDIUMCVSS 6.5fixed in 10.0.14393.95122026-09-08
CVE-2026-69624 [MEDIUM] CWE-184 CVE-2026-69624: Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an auth
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
nvd
CVE-2026-87714P3MEDIUMCVSS 6.5fixed in 10.0.14393.96122026-10-13
CVE-2026-87714 [MEDIUM] CWE-862 CVE-2026-87714: Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a ne
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2023-35383P3HIGHCVSS 7.5fixed in 10.0.14393.61672023-08-08
CVE-2023-35383 [HIGH] CWE-190 CVE-2023-35383: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2023-36906P3HIGHCVSS 7.5fixed in 10.0.14393.61672023-08-08
CVE-2023-36906 [HIGH] CWE-170 CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2025-27741P3HIGHCVSS 7.8fixed in 10.0.14393.79692025-04-08
CVE-2025-27741 [HIGH] CWE-125 CVE-2025-27741: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21817P3HIGHCVSS 7.8fixed in 10.0.14393.57172023-02-14
CVE-2023-21817 [HIGH] CWE-287 CVE-2023-21817: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2023-21822P3HIGHCVSS 7.8fixed in 10.0.14393.57172023-02-14
CVE-2023-21822 [HIGH] CWE-416 CVE-2023-21822: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2025-27483P3HIGHCVSS 7.8fixed in 10.0.14393.79692025-04-08
CVE-2025-27483 [HIGH] CWE-125 CVE-2025-27483: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21805P3HIGHCVSS 7.8fixed in 10.0.14393.57172023-02-14
CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2025-27733P3HIGHCVSS 7.8fixed in 10.0.14393.79692025-04-08
CVE-2025-27733 [HIGH] CWE-125 CVE-2025-27733: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-21691P3HIGHCVSS 7.5fixed in 10.0.14393.57172023-02-14
CVE-2023-21691 [HIGH] CWE-125 CVE-2023-21691: Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
nvd
CVE-2023-36705P3HIGHCVSS 7.8fixed in 10.0.14393.64522023-11-14
CVE-2023-36705 [HIGH] CWE-59 CVE-2023-36705: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-35313P3HIGHCVSS 7.8fixed in 10.0.14393.60852023-07-11
CVE-2023-35313 [HIGH] CWE-416 CVE-2023-35313: Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
nvd
CVE-2024-21354P3HIGHCVSS 7.8fixed in 10.0.14393.67092024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8fixed in 10.0.14393.64522023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd
CVE-2023-36408P3HIGHCVSS 7.8fixed in 10.0.14393.64522023-11-14
CVE-2023-36408 [HIGH] CWE-122 CVE-2023-36408: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2025-32707P3HIGHCVSS 7.8fixed in 10.0.14393.80662025-05-13
CVE-2025-32707 [HIGH] CWE-125 CVE-2025-32707: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-35342P3HIGHCVSS 7.8fixed in 10.0.14393.60852023-07-11
CVE-2023-35342 [HIGH] CWE-59 CVE-2023-35342: Windows Image Acquisition Elevation of Privilege Vulnerability
Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2023-35312P3HIGHCVSS 7.8fixed in 10.0.14393.60852023-07-11
CVE-2023-35312 [HIGH] CWE-190 CVE-2023-35312: Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
nvd