cbcvebase.

Microsoft Windows 10 Version 1607 vulnerabilities

4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.

Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12

Vulnerabilities

Page 90 of 226
CVE-2025-60714P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85942025-11-11
CVE-2025-60714 [HIGH] CWE-122 CVE-2025-60714: Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-24073P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.79692025-04-08
CVE-2025-24073 [HIGH] CWE-20 CVE-2025-24073: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-37982P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.74282024-10-08
CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
nvd
CVE-2025-24046P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.78762025-03-11
CVE-2025-24046 [HIGH] CWE-416 CVE-2025-24046: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54912P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.84222025-09-09
CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83843P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-83843 [HIGH] CWE-125 CVE-2026-83843: Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker t Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-32712P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.81482025-06-10
CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62455P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.86882025-12-09
CVE-2025-62455 [HIGH] CWE-20 CVE-2025-62455: Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privil Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69328P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69328 [HIGH] CWE-426 CVE-2026-69328: Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69785P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69785 [HIGH] CWE-426 CVE-2026-69785: Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges loca Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59201P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53152P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
nvd
CVE-2025-50153P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49761P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.83302025-08-12
CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69631P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69631 [HIGH] CWE-190 CVE-2026-69631: Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-77893P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77893 [HIGH] CWE-125 CVE-2026-77893: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-77886P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77886 [HIGH] CWE-125 CVE-2026-77886: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-77501P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77501 [HIGH] CWE-125 CVE-2026-77501: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-77895P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-77895 [HIGH] CWE-125 CVE-2026-77895: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-69342P3HIGHCVSS 7.5≥ 10.0.14393.0, < 10.0.14393.95122026-09-08
CVE-2026-69342 [HIGH] CWE-125 CVE-2026-69342: Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
nvd
← Previous90 / 226Next →
Microsoft Windows 10 Version 1607 vulnerabilities | cvebase