Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 185 of 226
CVE-2024-43638P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.75152024-11-12
CVE-2024-43638 [MEDIUM] CWE-125 CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43643P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.75152024-11-12
CVE-2024-43643 [MEDIUM] CWE-125 CVE-2024-43643: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21963P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11
CVE-2022-21963 [MEDIUM] CVE-2022-21963: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
nvd
CVE-2024-38223P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.72592024-08-13
CVE-2024-38223 [MEDIUM] CWE-284 CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
nvd
CVE-2025-24987P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.78762025-03-11
CVE-2025-24987 [MEDIUM] CWE-125 CVE-2025-24987: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-24988P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.78762025-03-11
CVE-2025-24988 [MEDIUM] CWE-125 CVE-2025-24988: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2023-28249P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28249 [MEDIUM] CWE-863 CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2025-49751P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-49751 [MEDIUM] CWE-820 CVE-2025-49751: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-47999P4MEDIUMCVSS 6.8≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-47999 [MEDIUM] CWE-820 CVE-2025-47999: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2022-38032P4MEDIUMCVSS 6.6≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38032 [MEDIUM] CVE-2022-38032: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
nvd
CVE-2023-32055P4MEDIUMCVSS 6.7≥ 10.0.14393.0, < 10.0.14393.60852023-07-11
CVE-2023-32055 [MEDIUM] CWE-416 CVE-2023-32055: Active Template Library Elevation of Privilege Vulnerability
Active Template Library Elevation of Privilege Vulnerability
nvd
CVE-2022-22023P4MEDIUMCVSS 6.6≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-22023 [MEDIUM] CVE-2022-22023: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
nvd
CVE-2025-47980P4MEDIUMCVSS 6.2≥ 10.0.14393.0, < 10.0.14393.82462025-07-08
CVE-2025-47980 [MEDIUM] CWE-200 CVE-2025-47980: Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an un
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-24900P4MEDIUMCVSS 5.9≥ 10.0.14393.0, < 10.0.14393.59212023-05-09
CVE-2023-24900 [MEDIUM] CWE-125 CVE-2023-24900: Windows NTLM Security Support Provider Information Disclosure Vulnerability
Windows NTLM Security Support Provider Information Disclosure Vulnerability
nvd
CVE-2020-1141P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < publication2020-05-21
CVE-2020-1141 [MEDIUM] CVE-2020-1141: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in com
nvd
CVE-2025-54101P4MEDIUMCVSS 4.8≥ 10.0.14393.0, < 10.0.14393.84222025-09-09
CVE-2025-54101 [MEDIUM] CWE-416 CVE-2025-54101: Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
nvd
CVE-2020-16919P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-10-16
CVE-2020-16919 [MEDIUM] CVE-2020-16919: <p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service
An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files.
An attacker with unprivileged access to a vulnerable system could exploit this vulnerability.
The security update addresses the vul
nvd
CVE-2026-70232P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70232 [MEDIUM] CWE-497 CVE-2026-70232: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83713P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83713 [MEDIUM] CWE-497 CVE-2026-83713: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70199P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70199 [MEDIUM] CWE-497 CVE-2026-70199: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd