Windows 10 version 1607
by Microsoft
CVEs (1,459)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21226 | Med | 0.43 | 6.6 | 0.01 | Jan 14, 2025 | Windows Digital Media Elevation of Privilege Vulnerability | ||
| CVE-2024-49111 | Med | 0.43 | 6.6 | 0.01 | Dec 12, 2024 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | ||
| CVE-2024-49109 | Med | 0.43 | 6.6 | 0.01 | Dec 12, 2024 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | ||
| CVE-2024-49101 | Med | 0.43 | 6.6 | 0.01 | Dec 12, 2024 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | ||
| CVE-2024-49094 | Med | 0.43 | 6.6 | 0.01 | Dec 12, 2024 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | ||
| CVE-2024-49081 | Med | 0.43 | 6.6 | 0.01 | Dec 12, 2024 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | ||
| CVE-2024-38049 | Med | 0.43 | 6.6 | 0.02 | Jul 9, 2024 | Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability | ||
| CVE-2024-20666 | Med | 0.43 | 6.6 | 0.03 | Jan 9, 2024 | BitLocker Security Feature Bypass Vulnerability | ||
| CVE-2019-1025 | Med | 0.43 | 6.5 | 0.05 | Jun 12, 2019 | A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected… | ||
| CVE-2019-0972 | Med | 0.43 | 6.5 | 0.06 | Jun 12, 2019 | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a… | ||
| CVE-2026-21265 | Med | 0.42 | 6.4 | 0.01 | Jan 13, 2026 | Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing… | ||
| CVE-2026-20847 | Med | 0.42 | 6.5 | 0.01 | Jan 13, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-20812 | Med | 0.42 | 6.5 | 0.01 | Jan 13, 2026 | Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network. | ||
| CVE-2025-64670 | Med | 0.42 | 6.5 | 0.01 | Dec 9, 2025 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network. | ||
| CVE-2025-62473 | Med | 0.42 | 6.5 | 0.01 | Dec 9, 2025 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2025-62465 | Med | 0.42 | 6.5 | 0.00 | Dec 9, 2025 | Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally. | ||
| CVE-2025-62463 | Med | 0.42 | 6.5 | 0.00 | Dec 9, 2025 | Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally. | ||
| CVE-2025-60708 | Med | 0.42 | 6.5 | 0.00 | Nov 11, 2025 | Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally. | ||
| CVE-2025-59259 | Med | 0.42 | 6.5 | 0.02 | Oct 14, 2025 | Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. | ||
| CVE-2025-59244 | Med | 0.42 | 6.5 | 0.01 | Oct 14, 2025 | External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network. |
- risk 0.43cvss 6.6epss 0.01
Windows Digital Media Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.02
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
- risk 0.43cvss 6.6epss 0.03
BitLocker Security Feature Bypass Vulnerability
- risk 0.43cvss 6.5epss 0.05
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected…
- risk 0.43cvss 6.5epss 0.06
This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a…
- risk 0.42cvss 6.4epss 0.01
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing…
- risk 0.42cvss 6.5epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.
- risk 0.42cvss 6.5epss 0.01
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
- risk 0.42cvss 6.5epss 0.01
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.00
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
- risk 0.42cvss 6.5epss 0.00
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
- risk 0.42cvss 6.5epss 0.00
Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.
- risk 0.42cvss 6.5epss 0.02
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
- risk 0.42cvss 6.5epss 0.01
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
Page 58 of 73