Microsoft Windows 10 Version 1607 vulnerabilities
4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12
Vulnerabilities
Page 63 of 226
CVE-2026-70278P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70278 [HIGH] CWE-122 CVE-2026-70278: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61365P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61364P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61364 [HIGH] CWE-306 CVE-2026-61364: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42976P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-42976 [HIGH] CWE-306 CVE-2026-42976: Missing authentication for critical function in Windows RPC API allows an authorized attacker to ele
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61367P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61367 [HIGH] CWE-306 CVE-2026-61367: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62777P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-62777 [HIGH] CWE-306 CVE-2026-62777: Missing authentication for critical function in Windows License Manager allows an authorized attacke
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45638P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45638 [HIGH] CWE-122 CVE-2026-45638: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87707P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-10-13
CVE-2026-87707 [HIGH] CWE-122 CVE-2026-87707: Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40406P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-40406 [HIGH] CWE-416 CVE-2026-40406: Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a netw
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-43883P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.14393.48252021-12-15
CVE-2021-43883 [HIGH] CVE-2021-43883: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-38241P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.73362024-09-10
CVE-2024-38241 [HIGH] CWE-20 CVE-2024-38241: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38125P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.72592024-08-13
CVE-2024-38125 [HIGH] CWE-197 CVE-2024-38125: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-97789P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-97789 [HIGH] CWE-416 CVE-2026-97789: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56648P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-56648 [HIGH] CWE-367 CVE-2026-56648: Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorize
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2022-29104P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.51252022-05-10
CVE-2022-29104 [HIGH] CVE-2022-29104: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2026-42909P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-42909 [HIGH] CWE-362 CVE-2026-42909: Concurrent execution using shared resource with improper synchronization ('race condition') in Remot
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2019-1159P3HIGHCVSS 7.8≥ 10.0.0, < publication2019-08-14
CVE-2019-1159 [HIGH] CVE-2019-1159: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a
nvd
CVE-2020-17162P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-02-25
CVE-2020-17162 [HIGH] CVE-2020-17162: Microsoft Windows Security Feature Bypass Vulnerability
Microsoft Windows Security Feature Bypass Vulnerability
nvd
CVE-2021-1706P3HIGHCVSS 8.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1706 [HIGH] CWE-269 CVE-2021-1706: Windows LUAFV Elevation of Privilege Vulnerability
Windows LUAFV Elevation of Privilege Vulnerability
nvd
CVE-2025-30388P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.80662025-05-13
CVE-2025-30388 [HIGH] CWE-122 CVE-2025-30388: Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
nvd