cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12

Vulnerabilities

Page 66 of 226
CVE-2022-30211P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.52462022-07-12
CVE-2022-30211 [HIGH] CVE-2022-30211: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2026-69332P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69332 [HIGH] CWE-125 CVE-2026-69332: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69505P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69505 [HIGH] CWE-125 CVE-2026-69505: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69458P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69458 [HIGH] CWE-125 CVE-2026-69458: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a n Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50365P3HIGHCVSS 8.0≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50365 [HIGH] CWE-287 CVE-2026-50365: Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2026-57087P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-57087 [HIGH] CWE-122 CVE-2026-57087: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-30194P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.52912022-08-09
CVE-2022-30194 [HIGH] CWE-94 CVE-2022-30194: Windows WebBrowser Control Remote Code Execution Vulnerability Windows WebBrowser Control Remote Code Execution Vulnerability
nvd
CVE-2023-38184P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.61672023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2020-1126P3HIGHCVSS 8.8≥ 10.0.14393.0, < publication2020-05-21
CVE-2020-1126 [HIGH] CWE-787 CVE-2020-1126: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincin
nvd
CVE-2026-70058P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70058 [HIGH] CWE-787 CVE-2026-70058: Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70155P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70155 [HIGH] CWE-401 CVE-2026-70155: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-49089P3HIGHCVSS 7.2≥ 10.0.14393.0, < 10.0.14393.76062024-12-12
CVE-2024-49089 [HIGH] CWE-122 CVE-2024-49089: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2026-70031P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83795P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83795 [HIGH] CWE-122 CVE-2026-83795: Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21246P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.88682026-02-10
CVE-2026-21246 [HIGH] CWE-122 CVE-2026-21246: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70065P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-70065 [HIGH] CWE-401 CVE-2026-70065: Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized att Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50368P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50368 [HIGH] CWE-121 CVE-2026-50368: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50355P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50355 [HIGH] CWE-121 CVE-2026-50355: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50695P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50695 [HIGH] CWE-121 CVE-2026-50695: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase