Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 144 of 226
CVE-2026-69280P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69280 [HIGH] CWE-416 CVE-2026-69280: Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69654P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69654 [HIGH] CWE-416 CVE-2026-69654: Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges local
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71353P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-71353 [HIGH] CWE-415 CVE-2026-71353: Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to ele
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69652P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69652 [HIGH] CWE-416 CVE-2026-69652: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69275P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69275 [HIGH] CWE-416 CVE-2026-69275: Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69567P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69567 [HIGH] CWE-416 CVE-2026-69567: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69816P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69816 [HIGH] CWE-416 CVE-2026-69816: Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges local
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69834P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69834 [HIGH] CWE-416 CVE-2026-69834: Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62694P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-62694 [HIGH] CWE-416 CVE-2026-62694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85360P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-85360 [HIGH] CWE-416 CVE-2026-85360: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71351P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-71351 [HIGH] CWE-415 CVE-2026-71351: Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to ele
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69473P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69473 [HIGH] CWE-416 CVE-2026-69473: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65678P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-65678 [HIGH] CWE-416 CVE-2026-65678: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61366P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61366 [HIGH] CWE-415 CVE-2026-61366: Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62773P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-62773 [HIGH] CWE-416 CVE-2026-62773: Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50296P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50296 [HIGH] CWE-416 CVE-2026-50296: Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50397P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50397 [HIGH] CWE-416 CVE-2026-50397: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58629P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58629 [HIGH] CWE-416 CVE-2026-58629: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34347P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-34347 [HIGH] CWE-416 CVE-2026-34347: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58725P3HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-58725 [HIGH] CWE-122 CVE-2025-58725: Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
nvd