Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 108 of 226
CVE-2021-31975P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability
nvd
CVE-2024-21371P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.67092024-02-13
CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2022-29105P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2022-26926P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-26926 [HIGH] CWE-284 CVE-2022-26926: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2020-0908P3HIGHCVSS 7.5≥ 10.0.0, < publication2020-09-11
CVE-2020-0908 [HIGH] CVE-2020-0908: <p>A remote code execution vulnerability exists when the Windows Text Service Module improperly hand
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system.
An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (Chromium-based), and then convince
nvd
CVE-2020-1565P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1565 [HIGH] CVE-2020-1565: An elevation of privilege vulnerability exists when the "Public Account Pictures" folder i
An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting
nvd
CVE-2021-40465P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability
Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-34530P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.45832021-08-12
CVE-2021-34530 [HIGH] CVE-2021-34530: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2021-36937P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.45832021-08-12
CVE-2021-36937 [HIGH] CVE-2021-36937: Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2022-30206P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30206 [HIGH] CVE-2022-30206: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-43234P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.48252021-12-15
CVE-2021-43234 [HIGH] CVE-2021-43234: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-37955P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-37955 [HIGH] CVE-2022-37955: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2021-41331P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-41331 [HIGH] CVE-2021-41331: Windows Media Audio Decoder Remote Code Execution Vulnerability
Windows Media Audio Decoder Remote Code Execution Vulnerability
nvd
CVE-2021-41340P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.47042021-10-13
CVE-2021-41340 [HIGH] CVE-2021-41340: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-24494P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-24494 [HIGH] CVE-2022-24494: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2020-1566P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1566 [HIGH] CVE-2020-1566: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a
nvd
CVE-2022-23284P3HIGHCVSS 7.2≥ 10.0.14393.0, < 10.0.14393.50062022-03-09
CVE-2022-23284 [HIGH] CVE-2022-23284: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2025-27473P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.79692025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2020-1377P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1377 [HIGH] CVE-2020-1377: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles regist
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.
The security update a
nvd