Microsoft Windows 10 Version 1607 vulnerabilities
4,503 known vulnerabilities affecting microsoft/windows_10_version_1607.
Total CVEs
4,503
CISA KEV
107
actively exploited
Public exploits
85
Exploited in wild
140
Severity breakdown
CRITICAL171HIGH3241MEDIUM1079LOW12
Vulnerabilities
Page 95 of 226
CVE-2026-88188P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88188 [HIGH] CWE-125 CVE-2026-88188: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96928P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96928 [HIGH] CWE-125 CVE-2026-96928: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96867P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-96862P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-96862 [HIGH] CWE-125 CVE-2026-96862: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88179P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-88179 [HIGH] CWE-125 CVE-2026-88179: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59187P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca
Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40409P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-45592P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.92342026-06-09
CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50491P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.93392026-07-14
CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege
Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59278P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59275P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.85192025-10-14
CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33834P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61349P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.94182026-08-11
CVE-2026-61349 [HIGH] CWE-362 CVE-2026-61349: Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69650P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-69650 [HIGH] CWE-347 CVE-2026-69650: Improper verification of cryptographic signature in Windows Key Distribution Center allows an author
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34338P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40382P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.91402026-05-12
CVE-2026-40382 [HIGH] CWE-416 CVE-2026-40382: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87712P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-87712 [HIGH] CWE-416 CVE-2026-87712: Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85933P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85933 [HIGH] CWE-416 CVE-2026-85933: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27920P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.90602026-04-14
CVE-2026-27920 [HIGH] CWE-822 CVE-2026-27920: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85863P3HIGHCVSS 7.8≥ 10.0.14393.0, < 10.0.14393.96122026-10-13
CVE-2026-85863 [HIGH] CWE-416 CVE-2026-85863: Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
nvd