cbcvebase.

Microsoft Windows 10 Version 1507 vulnerabilities

2,323 known vulnerabilities affecting microsoft/windows_10_version_1507.

Total CVEs
2,323
CISA KEV
90
actively exploited
Public exploits
77
Exploited in wild
121
Severity breakdown
CRITICAL70HIGH1666MEDIUM579LOW8

Vulnerabilities

Page 37 of 117
CVE-2021-43233P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.10240.191452021-12-15
CVE-2021-43233 [HIGH] CVE-2021-43233: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2021-34534P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.190222021-08-12
CVE-2021-34534 [HIGH] CVE-2021-34534: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2025-26641P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-26641 [HIGH] CWE-400 CVE-2025-26641: Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-32714P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210342025-06-10
CVE-2025-32714 [HIGH] CWE-284 CVE-2025-32714: Improper access control in Windows Installer allows an authorized attacker to elevate privileges loc Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-21983P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.192652022-04-15
CVE-2022-21983 [HIGH] CVE-2022-21983: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2025-21389P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.208902025-01-14
CVE-2025-21389 [HIGH] CWE-400 CVE-2025-21389: Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an un Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
nvd
CVE-2022-24534P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.192652022-04-15
CVE-2022-24534 [HIGH] CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2025-33056P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.210342025-06-10
CVE-2025-33056 [HIGH] CWE-284 CVE-2025-33056: Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-47955P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210142025-06-10
CVE-2025-47955 [HIGH] CWE-269 CVE-2025-47955: Improper privilege management in Windows Remote Access Connection Manager allows an authorized attac Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26686P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-26686 [HIGH] CWE-591 CVE-2025-26686: Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21347P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.204692024-02-13
CVE-2024-21347 [HIGH] CWE-122 CVE-2024-21347: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-24073P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-24073 [HIGH] CWE-20 CVE-2025-24073: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-37982P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.207962024-10-08
CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
nvd
CVE-2025-24046P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.209472025-03-11
CVE-2025-24046 [HIGH] CWE-416 CVE-2025-24046: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54912P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211282025-09-09
CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-32712P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210342025-06-10
CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59201P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211612025-10-14
CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53152P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211002025-08-12
CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
nvd
CVE-2025-50153P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211002025-08-12
CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49761P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211002025-08-12
CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
← Previous37 / 117Next →
Microsoft Windows 10 Version 1507 vulnerabilities | cvebase