Microsoft Windows 10 Version 1507 vulnerabilities
2,277 known vulnerabilities affecting microsoft/windows_10_version_1507.
Total CVEs
2,277
CISA KEV
89
actively exploited
Public exploits
75
Exploited in wild
118
Severity breakdown
CRITICAL69HIGH1630MEDIUM570LOW8
Vulnerabilities
Page 55 of 114
CVE-2025-21220P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.208902025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2021-26871P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26871 [HIGH] CVE-2021-26871: Windows WalletService Elevation of Privilege Vulnerability
Windows WalletService Elevation of Privilege Vulnerability
nvd
CVE-2023-36567P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.202322023-10-10
CVE-2023-36567 [HIGH] CWE-908 CVE-2023-36567: Windows Deployment Services Information Disclosure Vulnerability
Windows Deployment Services Information Disclosure Vulnerability
nvd
CVE-2021-1648P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1648 [HIGH] CWE-269 CVE-2021-1648: Microsoft splwow64 Elevation of Privilege Vulnerability
Microsoft splwow64 Elevation of Privilege Vulnerability
nvd
CVE-2023-36906P3HIGHCVSS 7.5≥ 10.0.10240.0, < 10.0.10240.201072023-08-08
CVE-2023-36906 [HIGH] CWE-170 CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2021-42279P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.10240.191192021-11-10
CVE-2021-42279 [HIGH] CWE-787 CVE-2021-42279: Chakra Scripting Engine Memory Corruption Vulnerability
Chakra Scripting Engine Memory Corruption Vulnerability
nvd
CVE-2021-26862P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26862 [HIGH] CWE-59 CVE-2021-26862: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2022-38004P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.194442022-09-13
CVE-2022-38004 [HIGH] CVE-2022-38004: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2020-17092P3HIGHCVSS 7.8≥ 10.0.10240.0, < publication2020-12-10
CVE-2020-17092 [HIGH] CVE-2020-17092: Windows Network Connections Service Elevation of Privilege Vulnerability
Windows Network Connections Service Elevation of Privilege Vulnerability
nvd
CVE-2019-0973P3HIGHCVSS 7.8≥ 10.0.10240.0, < publication2019-06-12
CVE-2019-0973 [HIGH] CWE-20 CVE-2019-0973: An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer f
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.
A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new
nvd
CVE-2022-41121P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.196242022-12-13
CVE-2022-41121 [HIGH] CVE-2022-41121: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-34719P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.194442022-09-13
CVE-2022-34719 [HIGH] CVE-2022-34719: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
nvd
CVE-2020-16905P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16905 [HIGH] CVE-2020-16905: <p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.
An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the
nvd
CVE-2020-0782P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-0782 [HIGH] CVE-2020-0782: <p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services im
An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted a
nvd
CVE-2022-30138P3HIGHCVSS 7.8≥ 10.0.10240.0, < 10.0.10240.192972022-05-18
CVE-2022-30138 [HIGH] CVE-2022-30138: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-34512P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.190032021-07-14
CVE-2021-34512 [HIGH] CWE-190 CVE-2021-34512: Storage Spaces Controller Elevation of Privilege Vulnerability
Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-40488P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.10240.190862021-10-13
CVE-2021-40488 [HIGH] CWE-269 CVE-2021-40488: Storage Spaces Controller Elevation of Privilege Vulnerability
Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2020-1486P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1486 [HIGH] CVE-2020-1486: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a
nvd
CVE-2019-1164P3HIGHCVSS 7.8≥ 10.0.0, < publication2019-08-14
CVE-2019-1164 [HIGH] CWE-1260 CVE-2019-1164: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnera
nvd
CVE-2020-1376P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1376 [HIGH] CVE-2020-1376: <p>An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memo
An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by en
nvd