Microsoft Windows 10 Version 1507 vulnerabilities
2,323 known vulnerabilities affecting microsoft/windows_10_version_1507.
Total CVEs
2,323
CISA KEV
90
actively exploited
Public exploits
77
Exploited in wild
121
Severity breakdown
CRITICAL70HIGH1666MEDIUM579LOW8
Vulnerabilities
Page 36 of 117
CVE-2024-30014P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.206512024-05-14
CVE-2024-30014 [HIGH] CWE-197 CVE-2024-30014: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38061P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.207102024-07-09
CVE-2024-38061 [HIGH] CWE-284 CVE-2024-38061: DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
nvd
CVE-2025-24995P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.209472025-03-11
CVE-2025-24995 [HIGH] CWE-122 CVE-2025-24995: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacke
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50173P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211002025-08-12
CVE-2025-50173 [HIGH] CWE-1390 CVE-2025-50173: Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-24474P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.192652022-04-15
CVE-2022-24474 [HIGH] CVE-2022-24474: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2025-48805P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210732025-07-08
CVE-2025-48805 [HIGH] CWE-122 CVE-2025-48805: Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to exec
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.
nvd
CVE-2025-48806P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210732025-07-08
CVE-2025-48806 [HIGH] CWE-416 CVE-2025-48806: Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code loc
Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.
nvd
CVE-2025-26687P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-26687 [HIGH] CWE-416 CVE-2025-26687: Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2025-49732P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210732025-07-08
CVE-2025-49732 [HIGH] CWE-122 CVE-2025-49732: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28238P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.198692023-04-11
CVE-2023-28238 [HIGH] CWE-591 CVE-2023-28238: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2025-27484P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-27484 [HIGH] CWE-591 CVE-2025-27484: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2022-30220P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.193602022-07-12
CVE-2022-30220 [HIGH] CVE-2022-30220: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-16927P3HIGHCVSS 7.5≥ 10.0.0, < publication2020-10-16
CVE-2020-16927 [HIGH] CVE-2020-16927: <p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connec
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.
To exploit this vulnerability, an attacker would need to run a sp
nvd
CVE-2022-22000P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.192042022-02-09
CVE-2022-22000 [HIGH] CVE-2022-22000: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35380P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.201072023-08-08
CVE-2023-35380 [HIGH] CWE-416 CVE-2023-35380: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-22026P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.193602022-07-12
CVE-2022-22026 [HIGH] CWE-787 CVE-2022-22026: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2023-21812P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.197472023-02-14
CVE-2023-21812 [HIGH] CWE-122 CVE-2023-21812: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21843P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.191772022-01-11
CVE-2022-21843 [HIGH] CVE-2022-21843: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2023-36425P3HIGHCVSS 8.0≥ 10.0.10240.0, < 10.0.10240.203082023-11-14
CVE-2023-36425 [HIGH] CWE-122 CVE-2023-36425: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2025-33067P3HIGHCVSS 8.4≥ 10.0.10240.0, < 10.0.10240.210342025-06-10
CVE-2025-33067 [HIGH] CWE-269 CVE-2025-33067: Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privilege
Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
nvd