Windows 10 version 1607
by Microsoft
CVEs (1,459)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49105 | Hig | 0.55 | 8.4 | 0.02 | Dec 12, 2024 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2024-38213 | Med | 0.55 | 6.5 | 0.14 | KEV | Aug 13, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability | |
| CVE-2024-37984 | Hig | 0.55 | 8.4 | 0.01 | Jul 9, 2024 | Secure Boot Security Feature Bypass Vulnerability | ||
| CVE-2024-30085 | Hig | 0.55 | 7.8 | 0.14 | Jun 11, 2024 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-29050 | Hig | 0.55 | 8.4 | 0.01 | Apr 9, 2024 | Windows Cryptographic Services Remote Code Execution Vulnerability | ||
| CVE-2024-21357 | Hig | 0.55 | 8.1 | 0.27 | Feb 13, 2024 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | ||
| CVE-2020-17136 | Hig | 0.55 | 7.8 | 0.14 | Dec 10, 2020 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2025-59254 | Hig | 0.54 | 7.8 | 0.01 | Oct 14, 2025 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49730 | Hig | 0.54 | 7.8 | 0.01 | Jul 8, 2025 | Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49683 | Hig | 0.54 | 7.8 | 0.02 | Jul 8, 2025 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-47987 | Hig | 0.54 | 7.8 | 0.02 | Jul 8, 2025 | Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-49122 | Hig | 0.54 | 8.1 | 0.21 | Dec 12, 2024 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2024-43642 | Hig | 0.54 | 7.5 | 0.63 | Nov 12, 2024 | Windows SMB Denial of Service Vulnerability | ||
| CVE-2024-43574 | Hig | 0.54 | 8.3 | 0.01 | Oct 8, 2024 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability | ||
| CVE-2024-30038 | Hig | 0.54 | 7.8 | 0.03 | May 14, 2024 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-21407 | Hig | 0.54 | 8.1 | 0.16 | Mar 12, 2024 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2020-17140 | Hig | 0.54 | 8.1 | 0.13 | Dec 10, 2020 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2019-0943 | Hig | 0.54 | 7.8 | 0.03 | Jun 12, 2019 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then… | ||
| CVE-2026-21525 | Med | 0.53 | 6.2 | 0.05 | KEV | Feb 10, 2026 | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. | |
| CVE-2026-20856 | Hig | 0.53 | 8.1 | 0.01 | Jan 13, 2026 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
- risk 0.55cvss 8.4epss 0.02
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.55cvss 6.5epss 0.14
Windows Mark of the Web Security Feature Bypass Vulnerability
- risk 0.55cvss 8.4epss 0.01
Secure Boot Security Feature Bypass Vulnerability
- risk 0.55cvss 7.8epss 0.14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.55cvss 8.4epss 0.01
Windows Cryptographic Services Remote Code Execution Vulnerability
- risk 0.55cvss 8.1epss 0.27
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- risk 0.55cvss 7.8epss 0.14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.54cvss 7.8epss 0.01
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.54cvss 7.8epss 0.01
Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
- risk 0.54cvss 7.8epss 0.02
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.
- risk 0.54cvss 7.8epss 0.02
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.
- risk 0.54cvss 8.1epss 0.21
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.54cvss 7.5epss 0.63
Windows SMB Denial of Service Vulnerability
- risk 0.54cvss 8.3epss 0.01
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
- risk 0.54cvss 7.8epss 0.03
Win32k Elevation of Privilege Vulnerability
- risk 0.54cvss 8.1epss 0.16
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.54cvss 8.1epss 0.13
Windows SMB Information Disclosure Vulnerability
- risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…
- risk 0.53cvss 6.2epss 0.05
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
- risk 0.53cvss 8.1epss 0.01
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
Page 13 of 73