Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 181 of 226
CVE-2026-35423P4MEDIUMCVSS 5.4≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-35423 [MEDIUM] CWE-125 CVE-2026-35423: Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a n
Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-68886P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-68886 [MEDIUM] CWE-209 CVE-2026-68886: Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70137P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70137 [MEDIUM] CWE-306 CVE-2026-70137: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69554P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69554 [MEDIUM] CWE-306 CVE-2026-69554: Missing authentication for critical function in Microsoft Windows Search Component allows an authori
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-42914P4MEDIUMCVSS 5.3≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-42914 [MEDIUM] CWE-125 CVE-2026-42914: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
cvelistv5nvd
CVE-2026-45595P4MEDIUMCVSS 5.4≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45595 [MEDIUM] CWE-693 CVE-2026-45595: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-34507P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.45302021-07-14
CVE-2021-34507 [MEDIUM] CVE-2021-34507: Windows Remote Assistance Information Disclosure Vulnerability
Windows Remote Assistance Information Disclosure Vulnerability
nvd
CVE-2022-26934P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-35837P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-35837 [MEDIUM] CVE-2022-35837: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-30208P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30208 [MEDIUM] CVE-2022-30208: Windows Security Account Manager (SAM) Denial of Service Vulnerability
Windows Security Account Manager (SAM) Denial of Service Vulnerability
nvd
CVE-2022-37977P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-37977 [MEDIUM] CVE-2022-37977: Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
nvd
CVE-2022-38006P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.53562022-09-13
CVE-2022-38006 [MEDIUM] CVE-2022-38006: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-21997P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.49462022-02-09
CVE-2022-21997 [HIGH] CWE-59 CVE-2022-21997: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-30226P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30226 [HIGH] CVE-2022-30226: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-22022P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-22022 [HIGH] CVE-2022-22022: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2023-21760P4HIGHCVSS 7.1≥ 10.0.14393.0, < 10.0.14393.56482023-01-10
CVE-2023-21760 [HIGH] CWE-59 CVE-2023-21760: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2025-50158P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-50158 [HIGH] CWE-367 CVE-2025-50158: Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-23385P4HIGHCVSS 7.0≥ 10.0.14393.0, < 10.0.14393.57862023-03-14
CVE-2023-23385 [HIGH] CWE-190 CVE-2023-23385: Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
nvd
CVE-2023-21560P4MEDIUMCVSS 6.6≥ 10.0.14393.0, < 10.0.14393.56482023-01-10
CVE-2023-21560 [MEDIUM] CWE-122 CVE-2023-21560: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28269P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28269 [MEDIUM] CWE-122 CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd