Microsoft Windows 10 Version 1607 vulnerabilities
4,509 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,509
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3244MEDIUM1082LOW12
Vulnerabilities
Page 18 of 226
CVE-2026-69730P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69730 [CRITICAL] CWE-416 CVE-2026-69730: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69586P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69586 [CRITICAL] CWE-122 CVE-2026-69586: Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute c
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69408P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69408 [CRITICAL] CWE-122 CVE-2026-69408: Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56159P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-56159 [CRITICAL] CWE-122 CVE-2026-56159: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42990P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-42990 [CRITICAL] CWE-122 CVE-2026-42990: Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50518P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50518 [CRITICAL] CWE-122 CVE-2026-50518: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50447P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50447 [CRITICAL] CWE-122 CVE-2026-50447: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83748P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83748 [CRITICAL] CWE-122 CVE-2026-83748: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83935P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83935 [CRITICAL] CWE-122 CVE-2026-83935: Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97815P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-97815 [CRITICAL] CWE-122 CVE-2026-97815: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58594P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58594 [CRITICAL] CWE-190 CVE-2026-58594: Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50694P2CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50694 [CRITICAL] CWE-416 CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-47984P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-47984 [HIGH] CWE-693 CVE-2025-47984: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38104P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.71592024-07-09
CVE-2024-38104 [HIGH] CWE-822 CVE-2024-38104: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2024-49080P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.76062024-12-12
CVE-2024-49080 [HIGH] CWE-122 CVE-2024-49080: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2025-21376P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.77852025-02-11
CVE-2025-21376 [HIGH] CWE-122 CVE-2025-21376: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2020-1074P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1074 [HIGH] CVE-2020-1074: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly hand
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2026-88159P2HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88159 [HIGH] CWE-125 CVE-2026-88159: Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-28220P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28220 [HIGH] CWE-591 CVE-2023-28220: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-28219P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28219 [HIGH] CWE-591 CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd