Microsoft Windows 10 Version 1607 vulnerabilities

CVE-2023-32040 [MEDIUM] CWE-822 CVE-2023-32040: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-35324 [MEDIUM] CWE-126 CVE-2023-35324: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-35306 [MEDIUM] CWE-20 CVE-2023-35306: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-35341 [MEDIUM] CWE-190 CVE-2023-35341: Microsoft DirectMusic Information Disclosure Vulnerability Microsoft DirectMusic Information Disclosure Vulnerability

CVE-2022-35758 [MEDIUM] CVE-2022-35758: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability

CVE-2023-21697 [MEDIUM] CWE-126 CVE-2023-21697: Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-23394 [MEDIUM] CWE-822 CVE-2023-23394: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

CVE-2023-23409 [MEDIUM] CWE-20 CVE-2023-23409: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

CVE-2020-1596 [MEDIUM] CWE-327 CVE-2020-1596: <p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An at A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel. To exploit the vulnerability, an attacker would have to conduct a man-in-the-middle attack. The update addresses t

CVE-2026-45606 [MEDIUM] CWE-125 CVE-2026-45606: Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

CVE-2019-0941 [MEDIUM] CWE-19 CVE-2019-0941: A denial of service exists in Microsoft IIS Server when the optional request filtering feature impro A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering. To exploit this vulnerability, an attacker could send a specially crafted req

CVE-2026-50684 [MEDIUM] CWE-79 CVE-2026-50684: Improper neutralization of input during web page generation ('cross-site scripting') in Active Direc Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

CVE-2026-83909 [MEDIUM] CWE-497 CVE-2026-83909: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-69483 [MEDIUM] CWE-125 CVE-2026-69483: Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.

CVE-2026-69895 [MEDIUM] CWE-125 CVE-2026-69895: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-83788 [MEDIUM] CWE-126 CVE-2026-83788: Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a phy Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-102221 [MEDIUM] CWE-299 CVE-2026-102221: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-69713 [MEDIUM] CWE-1395 CVE-2026-69713: Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-32209 [MEDIUM] CWE-284 CVE-2026-32209: Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

CVE-2023-36717 [MEDIUM] CVE-2023-36717: Windows Virtual Trusted Platform Module Denial of Service Vulnerability Windows Virtual Trusted Platform Module Denial of Service Vulnerability