cbcvebase.

Microsoft Windows 10 Version 1507 vulnerabilities

2,323 known vulnerabilities affecting microsoft/windows_10_version_1507.

Total CVEs
2,323
CISA KEV
90
actively exploited
Public exploits
77
Exploited in wild
121
Severity breakdown
CRITICAL70HIGH1666MEDIUM579LOW8

Vulnerabilities

Page 39 of 117
CVE-2023-24912P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.198692023-04-11
CVE-2023-24912 [HIGH] CWE-122 CVE-2023-24912: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2021-36967P3HIGHCVSS 8.8≥ 10.0.10240.0, < 10.0.10240.190602021-09-15
CVE-2021-36967 [HIGH] CWE-269 CVE-2021-36967: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21989P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.192042022-02-09
CVE-2022-21989 [HIGH] CVE-2022-21989: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2019-0909P3HIGHCVSS 7.5≥ 10.0.10240.0, < publication2019-06-12
CVE-2019-0909 [HIGH] CVE-2019-0909: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili
nvd
CVE-2022-35755P3HIGHCVSS 7.3≥ 10.0.10240.0, < 10.0.10240.193872023-05-31
CVE-2022-35755 [HIGH] CVE-2022-35755: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2025-24052P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.211612025-10-14
CVE-2025-24052 [HIGH] CWE-121 CVE-2025-24052: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Window
nvd
CVE-2020-16939P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16939 [HIGH] CWE-59 CVE-2020-16939: <p>An elevation of privilege vulnerability exists when Group Policy improperly checks access. An att An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affecte
nvd
CVE-2022-35793P3HIGHCVSS 7.3≥ 10.0.10240.0, < 10.0.10240.193872022-08-09
CVE-2022-35793 [HIGH] CVE-2022-35793: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-26931P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.192972022-05-10
CVE-2022-26931 [HIGH] CVE-2022-26931: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-22037P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.193602022-07-12
CVE-2022-22037 [HIGH] CVE-2022-22037: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2024-38127P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.207512024-08-13
CVE-2024-38127 [HIGH] CWE-126 CVE-2024-38127: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2021-28315P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-28315 [HIGH] CVE-2021-28315: Windows Media Video Decoder Remote Code Execution Vulnerability Windows Media Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2022-30209P3HIGHCVSS 7.4≥ 10.0.10240.0, < 10.0.10240.193602022-07-12
CVE-2022-30209 [HIGH] CVE-2022-30209: Windows IIS Server Elevation of Privilege Vulnerability Windows IIS Server Elevation of Privilege Vulnerability
nvd
CVE-2022-30142P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.193252022-06-15
CVE-2022-30142 [HIGH] CVE-2022-30142: Windows File History Remote Code Execution Vulnerability Windows File History Remote Code Execution Vulnerability
nvd
CVE-2023-36718P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.202322023-10-10
CVE-2023-36718 [HIGH] CWE-94 CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
nvd
CVE-2022-37978P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.195072022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass
nvd
CVE-2023-24932MEDIUMCVSS 6.7Exploited≥ 10.0.10240.0, < 10.0.10240.210732023-05-09
CVE-2023-24932 [MEDIUM] Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2025-27727P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-27727 [HIGH] CWE-59 CVE-2025-27727: Improper link resolution before file access ('link following') in Windows Installer allows an author Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38245P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.207662024-09-10
CVE-2024-38245 [HIGH] CWE-20 CVE-2024-38245: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-21363P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.204692024-02-13
CVE-2024-21363 [HIGH] CWE-843 CVE-2024-21363: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
← Previous39 / 117Next →
Microsoft Windows 10 Version 1507 vulnerabilities | cvebase