Microsoft Windows 10 Version 1607 vulnerabilities
4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12
Vulnerabilities
Page 35 of 226
CVE-2026-59134P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-59134 [HIGH] CWE-20 CVE-2026-59134: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-61363P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61363 [HIGH] CWE-20 CVE-2026-61363: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69913P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69913 [HIGH] CWE-416 CVE-2026-69913: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-30165P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.51922022-06-15
CVE-2022-30165 [HIGH] CVE-2022-30165: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2026-85799P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85799 [HIGH] CWE-416 CVE-2026-85799: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56188P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-56188 [HIGH] CWE-362 CVE-2026-56188: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45635P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45635 [HIGH] CWE-843 CVE-2026-45635: Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll)
Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69782P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69782 [HIGH] CWE-362 CVE-2026-69782: Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69827P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69827 [HIGH] CWE-362 CVE-2026-69827: Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-36434P3CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.63512023-10-10
CVE-2023-36434 [CRITICAL] CWE-307 CVE-2023-36434: Windows IIS Server Elevation of Privilege Vulnerability
Windows IIS Server Elevation of Privilege Vulnerability
nvd
CVE-2026-45599P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45599 [HIGH] CWE-416 CVE-2026-45599: Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code
Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68834P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-68834 [HIGH] CWE-121 CVE-2026-68834: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-68838P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-68838 [HIGH] CWE-121 CVE-2026-68838: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-68878P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-68878 [HIGH] CWE-121 CVE-2026-68878: Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate priv
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69481P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69481 [HIGH] CWE-122 CVE-2026-69481: Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to ele
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69301P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69301 [HIGH] CWE-121 CVE-2026-69301: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69418P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69418 [HIGH] CWE-122 CVE-2026-69418: Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privile
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-61352P3HIGHCVSS 8.1≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61352 [HIGH] CWE-362 CVE-2026-61352: Concurrent execution using shared resource with improper synchronization ('race condition') in Remot
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-38034P3HIGHCVSS 8.8≥ 10.0.14393.0, < 10.0.14393.54272022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability
Windows Workstation Service Elevation of Privilege Vulnerability
nvd
CVE-2020-1285P3HIGHCVSS 8.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1285 [HIGH] CVE-2020-1285: <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interfac
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users who
nvd