Microsoft Windows 10 Version 1607 vulnerabilities

CVE-2026-69954 [MEDIUM] CWE-126 CVE-2026-69954: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-70234 [MEDIUM] CWE-126 CVE-2026-70234: Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-68843 [MEDIUM] CWE-416 CVE-2026-68843: Use after free in Microsoft Office Word allows an authorized attacker to disclose information locall Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

CVE-2026-83664 [MEDIUM] CWE-843 CVE-2026-83664: Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-85935 [MEDIUM] CWE-126 CVE-2026-85935: Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-58545 [MEDIUM] CWE-284 CVE-2026-58545: Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

CVE-2026-70216 [MEDIUM] CWE-1220 CVE-2026-70216: Insufficient granularity of access control in Windows Mobile Device Management allows an authorized Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-96926 [MEDIUM] CWE-862 CVE-2026-96926: Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-83787 [MEDIUM] CWE-288 CVE-2026-83787: Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70087 [MEDIUM] CWE-863 CVE-2026-70087: Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature loc Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2024-30037 [MEDIUM] CWE-125 CVE-2024-30037: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2019-0716 [MEDIUM] CVE-2019-0716: A denial of service vulnerability exists when Windows improperly handles objects in memory. An attac A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an

CVE-2019-0711 [MEDIUM] CWE-20 CVE-2019-0711: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau

CVE-2019-0713 [MEDIUM] CWE-20 CVE-2019-0713: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau

CVE-2019-0710 [MEDIUM] CWE-20 CVE-2019-0710: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that cau