Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 179 of 226
CVE-2022-30225P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30225 [HIGH] CVE-2022-30225: Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
nvd
CVE-2022-29125P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29125 [HIGH] CVE-2022-29125: Windows Push Notifications Apps Elevation of Privilege Vulnerability
Windows Push Notifications Apps Elevation of Privilege Vulnerability
nvd
CVE-2019-1186P4HIGHCVSS 7.0≥ 10.0.0, < publication2019-08-14
CVE-2019-1186 [HIGH] CVE-2019-1186: An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in mem
An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability b
nvd
CVE-2019-1177P4HIGHCVSS 7.0≥ 10.0.0, < publication2019-08-14
CVE-2019-1177 [HIGH] CWE-269 CVE-2019-1177: An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memo
An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerab
nvd
CVE-2022-21867P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21867 [HIGH] CVE-2022-21867: Windows Push Notifications Apps Elevation of Privilege Vulnerability
Windows Push Notifications Apps Elevation of Privilege Vulnerability
nvd
CVE-2023-28224P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28224 [HIGH] CWE-591 CVE-2023-28224: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
nvd
CVE-2023-23407P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-23407 [HIGH] CWE-591 CVE-2023-23407: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
nvd
CVE-2023-23414P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-23414 [HIGH] CWE-591 CVE-2023-23414: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
nvd
CVE-2023-35329P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.60852023-07-11
CVE-2023-35329 [MEDIUM] CWE-400 CVE-2023-35329: Windows Authentication Denial of Service Vulnerability
Windows Authentication Denial of Service Vulnerability
nvd
CVE-2024-43534P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.74282024-10-08
CVE-2024-43534 [MEDIUM] CWE-125 CVE-2024-43534: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-1071P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < publication2020-05-21
CVE-2020-1071 [MEDIUM] CWE-755 CVE-2020-1071: An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote
An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An
nvd
CVE-2023-36902P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.63512023-10-10
CVE-2023-36902 [HIGH] CWE-416 CVE-2023-36902: Windows Runtime Remote Code Execution Vulnerability
Windows Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-28221P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28221 [HIGH] CWE-200 CVE-2023-28221: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2022-38027P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38027 [HIGH] CWE-362 CVE-2022-38027: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2023-29368P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.59892023-06-14
CVE-2023-29368 [HIGH] CWE-415 CVE-2023-29368: Windows Filtering Platform Elevation of Privilege Vulnerability
Windows Filtering Platform Elevation of Privilege Vulnerability
nvd
CVE-2023-28216P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28216 [HIGH] CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-26807P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.50662022-04-15
CVE-2022-26807 [HIGH] CWE-362 CVE-2022-26807: Windows Work Folder Service Elevation of Privilege Vulnerability
Windows Work Folder Service Elevation of Privilege Vulnerability
nvd
CVE-2019-0986P4MEDIUMCVSS 6.3≥ 10.0.14393.0, < publication2019-06-12
CVE-2019-0986 [MEDIUM] CWE-59 CVE-2019-0986: An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) impro
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a spe
nvd
CVE-2023-21542P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.56482023-01-10
CVE-2023-21542 [HIGH] CWE-59 CVE-2023-21542: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-24861P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-24861 [HIGH] CWE-367 CVE-2023-24861: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd