Microsoft Windows 10 Version 1607 vulnerabilities
4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12
Vulnerabilities
Page 66 of 226
CVE-2022-30211P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30211 [HIGH] CVE-2022-30211: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2026-69332P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69332 [HIGH] CWE-125 CVE-2026-69332: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69505P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69505 [HIGH] CWE-125 CVE-2026-69505: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69458P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69458 [HIGH] CWE-125 CVE-2026-69458: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a n
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50365P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50365 [HIGH] CWE-287 CVE-2026-50365: Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2026-57087P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-57087 [HIGH] CWE-122 CVE-2026-57087: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-30194P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.52912022-08-09
CVE-2022-30194 [HIGH] CWE-94 CVE-2022-30194: Windows WebBrowser Control Remote Code Execution Vulnerability
Windows WebBrowser Control Remote Code Execution Vulnerability
nvd
CVE-2023-38184P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.61672023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2020-1126P3HIGHCVSS 8.8≥ 10.0.14393.0, < publication2020-05-21
CVE-2020-1126 [HIGH] CWE-787 CVE-2020-1126: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.
There are multiple ways an attacker could exploit the vulnerability, such as by convincin
nvd
CVE-2026-70058P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70058 [HIGH] CWE-787 CVE-2026-70058: Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70155P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70155 [HIGH] CWE-401 CVE-2026-70155: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-49089P3HIGHCVSS 7.2≥ 10.0.14393.0, < 10.0.14393.76062024-12-12
CVE-2024-49089 [HIGH] CWE-122 CVE-2024-49089: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2026-70031P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83795P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83795 [HIGH] CWE-122 CVE-2026-83795: Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21246P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.88682026-02-10
CVE-2026-21246 [HIGH] CWE-122 CVE-2026-21246: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70065P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-70065 [HIGH] CWE-401 CVE-2026-70065: Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized att
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50368P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50368 [HIGH] CWE-121 CVE-2026-50368: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50355P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50355 [HIGH] CWE-121 CVE-2026-50355: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50695P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50695 [HIGH] CWE-121 CVE-2026-50695: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd