cbcvebase.

Microsoft Windows 10 Version 1507 vulnerabilities

2,277 known vulnerabilities affecting microsoft/windows_10_version_1507.

Total CVEs
2,277
CISA KEV
89
actively exploited
Public exploits
75
Exploited in wild
118
Severity breakdown
CRITICAL69HIGH1630MEDIUM570LOW8

Vulnerabilities

Page 48 of 114
CVE-2025-49661P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210732025-07-08
CVE-2025-49661 [HIGH] CWE-822 CVE-2025-49661: Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55230P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.210732025-08-21
CVE-2025-55230 [HIGH] CWE-822 CVE-2025-55230: Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to eleva Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-34696P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.193872022-08-09
CVE-2022-34696 [HIGH] CWE-362 CVE-2022-34696: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2022-30144P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.193872022-08-09
CVE-2022-30144 [HIGH] CVE-2022-30144: Windows Bluetooth Service Remote Code Execution Vulnerability Windows Bluetooth Service Remote Code Execution Vulnerability
nvd
CVE-2025-27738P3MEDIUMCVSS 6.5≥ 10.0.10240.0, < 10.0.10240.209782025-04-08
CVE-2025-27738 [MEDIUM] CWE-284 CVE-2025-27738: Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to dis Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-29842P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.210142025-05-13
CVE-2025-29842 [HIGH] CWE-349 CVE-2025-29842: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2025-25004P3HIGHCVSS 7.3≥ 10.0.10240.0, < 10.0.10240.211612025-10-14
CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2019-1198P3MEDIUMCVSS 6.5≥ 10.0.0, < publication2019-08-14
CVE-2019-1198 [MEDIUM] CVE-2019-1198: An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the v An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. Howev
nvd
CVE-2021-1710P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-31976P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.10240.189672021-06-08
CVE-2021-31976 [HIGH] CVE-2021-31976: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31975P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.10240.189672021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability Server for NFS Information Disclosure Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili
nvd
CVE-2022-29105P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.192972022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-34439P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.190032021-07-16
CVE-2021-34439 [HIGH] CVE-2021-34439: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24081P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24081 [HIGH] CWE-787 CVE-2021-24081: Microsoft Windows Codecs Library Remote Code Execution Vulnerability Microsoft Windows Codecs Library Remote Code Execution Vulnerability
nvd
CVE-2021-40465P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.190862021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-42276P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.191192021-11-10
CVE-2021-42276 [HIGH] CVE-2021-42276: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-34533P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.190222021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2021-43232P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.191452021-12-15
CVE-2021-43232 [HIGH] CVE-2021-43232: Windows Event Tracing Remote Code Execution Vulnerability Windows Event Tracing Remote Code Execution Vulnerability
nvd
← Previous48 / 114Next →
Microsoft Windows 10 Version 1507 vulnerabilities | cvebase