cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

4,504 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
4,504
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3242MEDIUM1079LOW12

Vulnerabilities

Page 72 of 226
CVE-2026-77494P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77494 [HIGH] CWE-843 CVE-2026-77494: Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unaut Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-77888P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77888 [HIGH] CWE-843 CVE-2026-77888: Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unaut Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83732P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83732 [HIGH] CWE-416 CVE-2026-83732: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49791P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-49791 [HIGH] CWE-59 CVE-2026-49791: Improper link resolution before file access ('link following') in Windows Routing and Remote Access Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83876P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85945P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83859P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83499P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83499 [HIGH] CWE-1220 CVE-2026-83499: Insufficient granularity of access control in Windows Server Update Service allows an authorized att Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-81969P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-81969 [HIGH] CWE-1220 CVE-2026-81969: Insufficient granularity of access control in Windows Server Update Service allows an authorized att Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69407P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69407 [HIGH] CWE-190 CVE-2026-69407: Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate pri Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69270P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69270 [HIGH] CWE-20 CVE-2026-69270: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69307P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69307 [HIGH] CWE-122 CVE-2026-69307: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69571P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69571 [HIGH] CWE-122 CVE-2026-69571: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65775P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-65775 [HIGH] CWE-416 CVE-2026-65775: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62707P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-62707 [HIGH] CWE-416 CVE-2026-62707: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62711P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-62711 [HIGH] CWE-416 CVE-2026-62711: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58632P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-58632 [HIGH] CWE-416 CVE-2026-58632: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
← Previous72 / 226Next →
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase