Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 192 of 226
CVE-2026-83760P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83760 [MEDIUM] CWE-125 CVE-2026-83760: Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose informati
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96846P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96846 [MEDIUM] CWE-125 CVE-2026-96846: Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
nvd
CVE-2026-87698P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-87698 [MEDIUM] CWE-125 CVE-2026-87698: Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45634P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45634 [MEDIUM] CWE-125 CVE-2026-45634: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information loca
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96935P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96935 [MEDIUM] CWE-497 CVE-2026-96935: Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70288P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70288 [MEDIUM] CWE-367 CVE-2026-70288: Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32212P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-32212 [MEDIUM] CWE-59 CVE-2026-32212: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll)
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69531P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69531 [MEDIUM] CWE-441 CVE-2026-69531: Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorize
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-85320P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85320 [MEDIUM] CWE-908 CVE-2026-85320: Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-88162P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88162 [MEDIUM] CWE-863 CVE-2026-88162: Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-32214P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl
Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2023-28226P4MEDIUMCVSS 5.3≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28226 [MEDIUM] CWE-347 CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability
Windows Enroll Engine Security Feature Bypass Vulnerability
nvd
CVE-2026-83646P4MEDIUMCVSS 5.4≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83646 [MEDIUM] CWE-601 CVE-2026-83646: Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS)
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-45655P4MEDIUMCVSS 5.3≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2021-24080P4MEDIUMCVSS 6.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24080 [MEDIUM] CVE-2021-24080: Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
nvd
CVE-2023-35377P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.61672023-08-08
CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-35376P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.61672023-08-08
CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2026-24297P4MEDIUMCVSS 4.8≥ 10.0.14393.0, < 10.0.14393.89572026-03-10
CVE-2026-24297 [MEDIUM] CWE-362 CVE-2026-24297: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36909P4MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.61672023-08-08
CVE-2023-36909 [MEDIUM] CWE-191 CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-28266P4MEDIUMCVSS 5.5≥ 10.0.14393.0, < 10.0.14393.58502023-04-11
CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd