Microsoft Windows 10 Version 1607 vulnerabilities

CVE-2026-83703 [MEDIUM] CWE-125 CVE-2026-83703: Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an a Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

CVE-2022-21924 [MEDIUM] CVE-2022-21924: Workstation Service Remote Protocol Security Feature Bypass Vulnerability Workstation Service Remote Protocol Security Feature Bypass Vulnerability

CVE-2026-77887 [MEDIUM] CWE-125 CVE-2026-77887: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

CVE-2026-77891 [MEDIUM] CWE-125 CVE-2026-77891: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

CVE-2026-69552 [MEDIUM] CWE-209 CVE-2026-69552: Generation of error message containing sensitive information in Windows Print Spooler Components all Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

CVE-2026-69372 [MEDIUM] CWE-125 CVE-2026-69372: Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.

CVE-2026-25185 [MEDIUM] CWE-200 CVE-2026-25185: Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows a Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-61368 [MEDIUM] CWE-122 CVE-2026-61368: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-20927 [MEDIUM] CWE-362 CVE-2026-20927: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-70057 [MEDIUM] CWE-863 CVE-2026-70057: Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized att Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVE-2026-72964 [MEDIUM] CWE-306 CVE-2026-72964: Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

CVE-2026-69321 [MEDIUM] CWE-306 CVE-2026-69321: Missing authentication for critical function in Windows Power Dependency Coordinator allows an autho Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

CVE-2022-29112 [MEDIUM] CVE-2022-29112: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

CVE-2023-28222 [HIGH] CWE-59 CVE-2023-28222: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

CVE-2019-0984 [HIGH] CVE-2019-0984: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted appli

CVE-2022-34690 [HIGH] CVE-2022-34690: Windows Fax Service Elevation of Privilege Vulnerability Windows Fax Service Elevation of Privilege Vulnerability

CVE-2023-28267 [MEDIUM] CWE-126 CVE-2023-28267: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2019-1180 [HIGH] CVE-2019-1180: An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in mem An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability b

CVE-2019-1178 [HIGH] CVE-2019-1178: An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in me An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability

CVE-2019-1179 [HIGH] CVE-2019-1179: An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in m An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability