cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12

Vulnerabilities

Page 105 of 226
CVE-2025-49659P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-49659 [HIGH] CWE-126 CVE-2025-49659: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-41118P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.55012022-11-09
CVE-2022-41118 [HIGH] CWE-362 CVE-2022-41118: Windows Scripting Languages Remote Code Execution Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability
nvd
CVE-2025-50152P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-50152 [HIGH] CWE-125 CVE-2025-50152: Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59505P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-59505 [HIGH] CWE-415 CVE-2025-59505: Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally. Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49679P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-49679 [HIGH] CWE-197 CVE-2025-49679: Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locall Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65681P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-65681 [HIGH] CWE-476 CVE-2026-65681: Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny ser Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-40378P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-40378 [HIGH] CWE-789 CVE-2026-40378: Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (L Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-55701P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-55701 [HIGH] CWE-1287 CVE-2025-55701: Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-48816P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-48816 [HIGH] CWE-125 CVE-2025-48816: Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileg Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69850P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69850 [HIGH] CWE-822 CVE-2026-69850: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-47991P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-47991 [HIGH] CWE-416 CVE-2025-47991: Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privi Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49742P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-49742 [HIGH] CWE-122 CVE-2025-49742: Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to exec Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.
nvd
CVE-2025-59192P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59192 [HIGH] CWE-126 CVE-2025-59192: Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally. Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-26248P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.68972024-04-09
CVE-2024-26248 [HIGH] CWE-303 CVE-2024-26248: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2024-38239P3HIGHCVSS 7.2≥ 10.0.14393.0, < 10.0.14393.73362024-09-10
CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2023-28232P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28232 [HIGH] CWE-362 CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-26234MEDIUMCVSS 6.7Exploited≥ 10.0.14393.0, < 10.0.14393.68972024-04-09
CVE-2024-26234 [MEDIUM] CWE-284 Proxy Driver Spoofing Vulnerability Proxy Driver Spoofing Vulnerability Proxy Driver Spoofing Vulnerability
cvelistv5
CVE-2024-38198P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.72592024-08-13
CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2026-35416P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-35416 [HIGH] CWE-416 CVE-2026-35416: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27908P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-27908 [HIGH] CWE-416 CVE-2026-27908: Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.
nvd
← Previous105 / 226Next →
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase