Microsoft Windows 10 Version 1507 vulnerabilities
2,323 known vulnerabilities affecting microsoft/windows_10_version_1507.
Total CVEs
2,323
CISA KEV
90
actively exploited
Public exploits
77
Exploited in wild
121
Severity breakdown
CRITICAL70HIGH1666MEDIUM579LOW8
Vulnerabilities
Page 27 of 117
CVE-2025-21332P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.208902025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2023-36882P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.201072023-08-08
CVE-2023-36882 [HIGH] CWE-416 CVE-2023-36882: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-29373P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.199832023-06-14
CVE-2023-29373 [HIGH] CWE-125 CVE-2023-29373: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2020-16891P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd
CVE-2022-34714P3HIGHCVSS 8.1≥ 10.0.10240.0, < 10.0.10240.193872022-08-09
CVE-2022-34714 [HIGH] CWE-94 CVE-2022-34714: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41081P3HIGHCVSS 8.1≥ 10.0.10240.0, < 10.0.10240.195072022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21543P3HIGHCVSS 8.1≥ 10.0.10240.0, < 10.0.10240.196852023-01-10
CVE-2023-21543 [HIGH] CWE-400 CVE-2023-21543: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2024-30020P3HIGHCVSS 8.1≥ 10.0.10240.0, < 10.0.10240.206512024-05-14
CVE-2024-30020 [HIGH] CWE-122 CVE-2024-30020: Windows Cryptographic Services Remote Code Execution Vulnerability
Windows Cryptographic Services Remote Code Execution Vulnerability
nvd
CVE-2024-49126P3HIGHCVSS 8.1≥ 10.0.10240.0, < 10.0.10240.208572024-12-12
CVE-2024-49126 [HIGH] CWE-416 CVE-2024-49126: Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
nvd
CVE-2025-27487P3HIGHCVSS 8.0≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-27487 [HIGH] CWE-122 CVE-2025-27487: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code ov
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
nvd
CVE-2023-23416P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.198052023-03-14
CVE-2023-23416 [HIGH] CWE-20 CVE-2023-23416: Windows Cryptographic Services Remote Code Execution Vulnerability
Windows Cryptographic Services Remote Code Execution Vulnerability
nvd
CVE-2023-36400P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.203082023-11-14
CVE-2023-36400 [HIGH] CWE-122 CVE-2023-36400: Windows HMAC Key Derivation Elevation of Privilege Vulnerability
Windows HMAC Key Derivation Elevation of Privilege Vulnerability
nvd
CVE-2023-36903P3CRITICALCVSS 9.8≥ 10.0.10240.0, < 10.0.10240.201072023-08-08
CVE-2023-36903 [CRITICAL] CWE-59 CVE-2023-36903: Windows System Assessment Tool Elevation of Privilege Vulnerability
Windows System Assessment Tool Elevation of Privilege Vulnerability
nvd
CVE-2025-58726P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.211612025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26158P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.205962024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2024-38244P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.207662024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-24533P3HIGHCVSS 8.0≥ 10.0.10240.0, < 10.0.10240.192652022-04-15
CVE-2022-24533 [HIGH] CVE-2022-24533: Remote Desktop Protocol Remote Code Execution Vulnerability
Remote Desktop Protocol Remote Code Execution Vulnerability
nvd
CVE-2025-26634P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.209152025-03-11
CVE-2025-26634 [HIGH] CWE-122 CVE-2025-26634: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-28227P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.198692023-04-11
CVE-2023-28227 [HIGH] CWE-122 CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability
Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36900P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.201072023-08-08
CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd