cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

3,019 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
3,019
CISA KEV
102
actively exploited
Public exploits
82
Exploited in wild
133
Severity breakdown
CRITICAL95HIGH2175MEDIUM737LOW12

Vulnerabilities

Page 10 of 151
CVE-2025-49730P3HIGHCVSS 7.8PoC≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-49730 [HIGH] CWE-122 CVE-2025-49730: Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an autho Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-23285P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.50062022-03-09
CVE-2022-23285 [HIGH] CVE-2022-23285: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2024-49122P2HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.76062024-12-12
CVE-2024-49122 [HIGH] CWE-416 CVE-2024-49122: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2019-0943P3HIGHCVSS 7.8PoC≥ 10.0.14393.0, < publication2019-06-12
CVE-2019-0943 [HIGH] CVE-2019-0943: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Loc An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user
nvd
CVE-2026-50330P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50330 [CRITICAL] CWE-122 CVE-2026-50330: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privi Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-44815P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-44815 [CRITICAL] CWE-121 CVE-2026-44815: Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code o Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2020-17095P2CRITICALCVSS 9.9≥ 10.0.14393.0, < publication2020-12-10
CVE-2020-17095 [CRITICAL] CVE-2020-17095: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2025-53143P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-53143 [HIGH] CWE-843 CVE-2025-53143: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2023-28302P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28302 [HIGH] CWE-20 CVE-2023-28302: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-53145P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-53145 [HIGH] CWE-843 CVE-2025-53145: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2025-53144P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-53144 [HIGH] CWE-843 CVE-2025-53144: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an a Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
nvd
CVE-2023-36028P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.64522023-11-14
CVE-2023-36028 [CRITICAL] CWE-122 CVE-2023-36028: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2021-36936P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.14393.45832021-08-12
CVE-2021-36936 [CRITICAL] CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability Windows Print Spooler Remote Code Execution Vulnerability
nvd
CVE-2023-21769P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-21769 [HIGH] CWE-125 CVE-2023-21769: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24943P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.59212023-05-09
CVE-2023-24943 [CRITICAL] CWE-122 CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2022-21990P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.50062022-03-09
CVE-2022-21990 [HIGH] CVE-2022-21990: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2021-26432P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.14393.45832021-08-12
CVE-2021-26432 [CRITICAL] CVE-2021-26432: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
nvd
CVE-2021-34535P2HIGHCVSS 8.8≥ 10.0.0, < 10.0.14393.45832021-08-12
CVE-2021-34535 [HIGH] CVE-2021-34535: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2024-38140P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.72592024-08-13
CVE-2024-38140 [CRITICAL] CWE-416 CVE-2024-38140: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
nvd
CVE-2023-23415P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-23415 [CRITICAL] CWE-122 CVE-2023-23415: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
nvd
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase