Windows 10 version 1607
by Microsoft
CVEs (1,387)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-53778 | Hig | 0.60 | 8.8 | 0.38 | Aug 12, 2025 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2024-38144 | Hig | 0.60 | 8.8 | 0.32 | Aug 13, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-35628 | Hig | 0.60 | 8.1 | 0.93 | Dec 12, 2023 | Windows MSHTML Platform Remote Code Execution Vulnerability | ||
| CVE-2025-55234 | Hig | 0.59 | 8.8 | 0.20 | Sep 9, 2025 | SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for… | ||
| CVE-2025-54918 | Hig | 0.59 | 8.8 | 0.19 | Sep 9, 2025 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-50171 | Cri | 0.59 | 9.1 | 0.01 | Aug 12, 2025 | Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2024-20674 | Hig | 0.59 | 8.8 | 0.17 | Jan 9, 2024 | Windows Kerberos Security Feature Bypass Vulnerability | ||
| CVE-2023-36017 | Hig | 0.59 | 8.8 | 0.25 | Nov 14, 2023 | Windows Scripting Engine Memory Corruption Vulnerability | ||
| CVE-2025-54110 | Hig | 0.58 | 8.8 | 0.04 | Sep 9, 2025 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-53145 | Hig | 0.58 | 8.8 | 0.06 | Aug 12, 2025 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network. | ||
| CVE-2025-53144 | Hig | 0.58 | 8.8 | 0.06 | Aug 12, 2025 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network. | ||
| CVE-2025-49724 | Hig | 0.58 | 8.8 | 0.07 | Jul 8, 2025 | Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-29962 | Hig | 0.58 | 8.8 | 0.14 | May 13, 2025 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-21391 | Hig | 0.58 | 7.1 | 0.02 | KEV | Feb 11, 2025 | Windows Storage Elevation of Privilege Vulnerability | |
| CVE-2024-43573 | Med | 0.58 | 6.5 | 0.44 | KEV | Oct 8, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-43532 | Hig | 0.58 | 8.8 | 0.12 | Oct 8, 2024 | Remote Registry Service Elevation of Privilege Vulnerability | ||
| CVE-2024-38106 | Hig | 0.58 | 7.0 | 0.06 | KEV | Aug 13, 2024 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2024-38060 | Hig | 0.58 | 8.8 | 0.16 | Jul 9, 2024 | Windows Imaging Component Remote Code Execution Vulnerability | ||
| CVE-2024-30078 | Hig | 0.58 | 8.8 | 0.05 | Jun 11, 2024 | Windows Wi-Fi Driver Remote Code Execution Vulnerability | ||
| CVE-2023-35641 | Hig | 0.58 | 8.8 | 0.07 | Dec 12, 2023 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
- risk 0.60cvss 8.8epss 0.38
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
- risk 0.60cvss 8.8epss 0.32
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.60cvss 8.1epss 0.93
Windows MSHTML Platform Remote Code Execution Vulnerability
- risk 0.59cvss 8.8epss 0.20
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for…
- risk 0.59cvss 8.8epss 0.19
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
- risk 0.59cvss 9.1epss 0.01
Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.
- risk 0.59cvss 8.8epss 0.17
Windows Kerberos Security Feature Bypass Vulnerability
- risk 0.59cvss 8.8epss 0.25
Windows Scripting Engine Memory Corruption Vulnerability
- risk 0.58cvss 8.8epss 0.04
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.58cvss 8.8epss 0.06
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
- risk 0.58cvss 8.8epss 0.06
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
- risk 0.58cvss 8.8epss 0.07
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
- risk 0.58cvss 8.8epss 0.14
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
- risk 0.58cvss 7.1epss 0.02
Windows Storage Elevation of Privilege Vulnerability
- risk 0.58cvss 6.5epss 0.44
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.58cvss 8.8epss 0.12
Remote Registry Service Elevation of Privilege Vulnerability
- risk 0.58cvss 7.0epss 0.06
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.16
Windows Imaging Component Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.05
Windows Wi-Fi Driver Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.07
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Page 4 of 70