Windows 10 version 1607
by Microsoft
CVEs (1,387)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-26174 | Med | 0.36 | 5.5 | 0.01 | Mar 12, 2024 | Windows Kernel Information Disclosure Vulnerability | ||
| CVE-2024-21408 | Med | 0.36 | 5.5 | 0.05 | Mar 12, 2024 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2024-21377 | Med | 0.36 | 5.5 | 0.01 | Feb 13, 2024 | Windows DNS Information Disclosure Vulnerability | ||
| CVE-2024-21362 | Med | 0.36 | 5.5 | 0.00 | Feb 13, 2024 | Windows Kernel Security Feature Bypass Vulnerability | ||
| CVE-2024-21311 | Med | 0.36 | 5.5 | 0.01 | Jan 9, 2024 | Windows Cryptographic Services Information Disclosure Vulnerability | ||
| CVE-2024-20694 | Med | 0.36 | 5.5 | 0.01 | Jan 9, 2024 | Windows CoreMessaging Information Disclosure Vulnerability | ||
| CVE-2023-35635 | Med | 0.36 | 5.5 | 0.01 | Dec 12, 2023 | Windows Kernel Denial of Service Vulnerability | ||
| CVE-2023-36428 | Med | 0.36 | 5.5 | 0.01 | Nov 14, 2023 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | ||
| CVE-2023-36406 | Med | 0.36 | 5.5 | 0.01 | Nov 14, 2023 | Windows Hyper-V Information Disclosure Vulnerability | ||
| CVE-2023-36404 | Med | 0.36 | 5.5 | 0.01 | Nov 14, 2023 | Windows Kernel Information Disclosure Vulnerability | ||
| CVE-2026-25185 | Med | 0.35 | 5.3 | 0.01 | Mar 10, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2026-20927 | Med | 0.35 | 5.3 | 0.01 | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network. | ||
| CVE-2025-62567 | Med | 0.35 | 5.3 | 0.01 | Dec 9, 2025 | Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network. | ||
| CVE-2025-47160 | Med | 0.35 | 5.4 | 0.01 | Jun 10, 2025 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2025-29956 | Med | 0.35 | 5.4 | 0.01 | May 13, 2025 | Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network. | ||
| CVE-2024-35270 | Med | 0.35 | 5.3 | 0.01 | Jul 9, 2024 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2024-21313 | Med | 0.35 | 5.3 | 0.01 | Jan 9, 2024 | Windows TCP/IP Information Disclosure Vulnerability | ||
| CVE-2025-55229 | Med | 0.34 | 5.3 | 0.00 | Aug 21, 2025 | Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2025-59198 | Med | 0.33 | 5.0 | 0.00 | Oct 14, 2025 | Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally. | ||
| CVE-2025-55679 | Med | 0.33 | 5.1 | 0.00 | Oct 14, 2025 | Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally. |
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.05
Windows Hyper-V Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows DNS Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.00
Windows Kernel Security Feature Bypass Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Cryptographic Services Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows CoreMessaging Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Hyper-V Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Information Disclosure Vulnerability
- risk 0.35cvss 5.3epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.3epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
- risk 0.35cvss 5.3epss 0.01
Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.
- risk 0.35cvss 5.4epss 0.01
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.35cvss 5.4epss 0.01
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
- risk 0.35cvss 5.3epss 0.01
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.35cvss 5.3epss 0.01
Windows TCP/IP Information Disclosure Vulnerability
- risk 0.34cvss 5.3epss 0.00
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.
- risk 0.33cvss 5.0epss 0.00
Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
- risk 0.33cvss 5.1epss 0.00
Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.
Page 67 of 70