Microsoft Windows 10 Version 1607 vulnerabilities

3,019 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs

3,019

CISA KEV

102

actively exploited

Public exploits

Exploited in wild

133

Severity breakdown

CRITICAL95HIGH2175MEDIUM737LOW12

Vulnerabilities

SortPage 32 of 151

CVE-2026-23674P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.89572026-03-10

CVE-2026-23674 [HIGH] CWE-41 CVE-2026-23674: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

nvd

CVE-2026-20929P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.87832026-01-13

CVE-2026-20929 [HIGH] CWE-284 CVE-2026-20929: Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-50412P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14

CVE-2026-50412 [HIGH] CWE-121 CVE-2026-50412: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-57096P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14

CVE-2026-57096 [HIGH] CWE-122 CVE-2026-57096: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49789P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14

CVE-2026-49789 [HIGH] CWE-121 CVE-2026-49789: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-26158P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.68972024-04-09

CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability Microsoft Install Service Elevation of Privilege Vulnerability

nvd

CVE-2026-50318P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14

CVE-2026-50318 [HIGH] CWE-121 CVE-2026-50318: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20849P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.87832026-01-13

CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2023-36900P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.61672023-08-08

CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2022-24502P3MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.50062022-03-09

CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability

nvd

CVE-2022-24492P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.50662022-04-15

CVE-2022-24492 [HIGH] CVE-2022-24492: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

CVE-2022-38034P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.54272022-10-11

CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability Windows Workstation Service Elevation of Privilege Vulnerability

nvd

CVE-2020-1593P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-09-11

CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user

nvd

CVE-2022-23253P3MEDIUMCVSS 6.5≥ 10.0.14393.0, < 10.0.14393.50062022-03-09

CVE-2022-23253 [MEDIUM] CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

nvd

CVE-2022-22019P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10

CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

CVE-2022-21857P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.48862022-01-11

CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability

nvd

CVE-2023-35359P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.61672023-08-08

CVE-2023-35359 [HIGH] CWE-23 CVE-2023-35359: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

CVE-2022-24528P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.50662022-04-15

CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability

nvd

CVE-2022-38045P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.54272022-10-11

CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability Windows Server Service Elevation of Privilege Vulnerability

nvd

CVE-2019-0720P3HIGHCVSS 8.0≥ 10.0.0, < publication2019-08-14

CVE-2019-0720 [HIGH] CWE-20 CVE-2019-0720: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to exe

nvd

← Previous32 / 151Next →