Microsoft Windows 10 Version 1607 vulnerabilities

CVE-2026-62800 [HIGH] CWE-122 CVE-2026-62800: Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

CVE-2026-88165 [HIGH] CWE-787 CVE-2026-88165: Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute cod Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-85931 [HIGH] CWE-122 CVE-2026-85931: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-50502 [HIGH] CWE-1220 CVE-2026-50502: Insufficient granularity of access control in Windows Event Logging Service allows an authorized att Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

CVE-2023-36606 [HIGH] CWE-400 CVE-2023-36606: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2021-24077 [CRITICAL] CVE-2021-24077: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability

CVE-2022-30133 [CRITICAL] CVE-2022-30133: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVE-2019-0722 [HIGH] CWE-20 CVE-2019-0722: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary

CVE-2023-28250 [CRITICAL] CWE-191 CVE-2023-28250: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-21803 [CRITICAL] CWE-190 CVE-2023-21803: Windows iSCSI Discovery Service Remote Code Execution Vulnerability Windows iSCSI Discovery Service Remote Code Execution Vulnerability

CVE-2023-35366 [CRITICAL] CWE-20 CVE-2023-35366: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2023-35367 [CRITICAL] CWE-20 CVE-2023-35367: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-105723 [CRITICAL] CWE-822 CVE-2026-105723: Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attack Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83693 [CRITICAL] CWE-122 CVE-2026-83693: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83519 [CRITICAL] CWE-122 CVE-2026-83519: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83780 [CRITICAL] CWE-416 CVE-2026-83780: Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69845 [CRITICAL] CWE-20 CVE-2026-69845: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69491 [CRITICAL] CWE-122 CVE-2026-69491: Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-73009 [CRITICAL] CWE-416 CVE-2026-73009: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-69276 [CRITICAL] CWE-122 CVE-2026-69276: Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.