Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 84 of 226
CVE-2026-69916P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69916 [HIGH] CWE-190 CVE-2026-69916: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72948P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-72948 [HIGH] CWE-23 CVE-2026-72948: Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88191P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88191 [HIGH] CWE-59 CVE-2026-88191: Improper link resolution before file access ('link following') in Microsoft Windows Search Component
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69612P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69612 [HIGH] CWE-36 CVE-2026-69612: Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileg
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69445P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69445 [HIGH] CWE-22 CVE-2026-69445: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-103569P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-103569 [HIGH] CWE-125 CVE-2026-103569: Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-20809P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.87832026-01-13
CVE-2026-20809 [HIGH] CWE-122 CVE-2026-20809: Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized atta
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96946P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96946 [HIGH] CWE-416 CVE-2026-96946: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96947P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96947 [HIGH] CWE-416 CVE-2026-96947: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96950P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96950 [HIGH] CWE-416 CVE-2026-96950: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87702P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-87702 [HIGH] CWE-190 CVE-2026-87702: Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83857P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83857 [HIGH] CWE-121 CVE-2026-83857: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83872P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83872 [HIGH] CWE-681 CVE-2026-83872: Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevat
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83727P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83727 [HIGH] CWE-126 CVE-2026-83727: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96118P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96118 [HIGH] CWE-125 CVE-2026-96118: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70247P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-70247 [HIGH] CWE-125 CVE-2026-70247: Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-83968P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-83968 [HIGH] CWE-400 CVE-2026-83968: Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69584P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69584 [HIGH] CWE-190 CVE-2026-69584: Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83979P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-83979 [HIGH] CWE-416 CVE-2026-83979: Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68832P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-68832 [HIGH] CWE-190 CVE-2026-68832: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd