cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12

Vulnerabilities

Page 68 of 226
CVE-2026-50451P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50451 [HIGH] CWE-306 CVE-2026-50451: Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) all Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40407P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-40407 [HIGH] CWE-122 CVE-2026-40407: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50333P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50333 [HIGH] CWE-306 CVE-2026-50333: Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72932P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72932 [HIGH] CWE-126 CVE-2026-72932: Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclos Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-40397P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-40397 [HIGH] CWE-191 CVE-2026-40397: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26160P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-26160 [HIGH] CWE-306 CVE-2026-26160: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88143P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88143 [HIGH] CWE-122 CVE-2026-88143: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87706P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-10-13
CVE-2026-87706 [HIGH] CWE-122 CVE-2026-87706: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50445P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50445 [HIGH] CWE-126 CVE-2026-50445: Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a netwo Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58535P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58535 [HIGH] CWE-908 CVE-2026-58535: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58533P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58533 [HIGH] CWE-908 CVE-2026-58533: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-43893P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.14393.48252021-12-15
CVE-2021-43893 [HIGH] CWE-668 CVE-2021-43893: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-69992P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69992 [HIGH] CWE-416 CVE-2026-69992: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69607P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69607 [HIGH] CWE-416 CVE-2026-69607: Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-33154P3CRITICALCVSS 9.8≥ 10.0.14393.0, < 10.0.14393.60852023-07-11
CVE-2023-33154 [CRITICAL] CWE-367 CVE-2023-33154: Windows Partition Management Driver Elevation of Privilege Vulnerability Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-69789P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-10-13
CVE-2026-69789 [HIGH] CWE-122 CVE-2026-69789: Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-44801P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-44801 [HIGH] CWE-416 CVE-2026-44801: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62759P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-62759 [HIGH] CWE-290 CVE-2026-62759: Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spo Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
nvd
CVE-2026-85811P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85811 [HIGH] CWE-416 CVE-2026-85811: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2021-31971P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.14393.44672021-06-08
CVE-2021-31971 [HIGH] CVE-2021-31971: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
← Previous68 / 226Next →
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase