Microsoft Windows 10 1507 vulnerabilities, page 2
1,228 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 1507, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-33742microsoft · windows_10_1507 +25 moreWindows MSHTML Platform Remote Code Execution VulnerabilityKEVEPSS59.41%HighCVE-2021-33771microsoft · windows_10_1507 +26 moreWindows Kernel Elevation of Privilege VulnerabilityKEVEPSS10.17%HighCVE-2015-2546microsoft · windows_10_1507 +8 moremicrosoft windows_10_1507The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.KEVRansomwareEPSS10.11%HighCVE-2015-6175microsoft · windows_10_1507microsoft windows_10_1507The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."KEVEPSS5.33%HighCVE-2016-0165microsoft · windows_10_1507 +5 moremicrosoft windows_10_1507The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.KEVEPSS13.73%HighCVE-2016-0167microsoft · windows_10_1507 +7 moremicrosoft windows_10_1507The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.KEVRansomwareEPSS5.68%HighCVE-2016-0151microsoft · windows_10_1507 +4 moremicrosoft windows_10_1507The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."KEVRansomwareEPSS62.94%HighCVE-2016-0099microsoft · windows_10_1507 +6 moremicrosoft windows_10_1507The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."KEVRansomwareEPSS37.05%CriticalCVE-2016-7256microsoft · windows_10_1507 +9 moremicrosoft windows_10_1507atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."KEVEPSS64.59%HighCVE-2016-7255microsoft · windows_10_1507 +9 moremicrosoft windows_10_1507The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."KEVRansomwareEPSS80.97%HighCVE-2016-3309microsoft · windows_10_1507 +8 moremicrosoft windows_10_1507The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.KEVRansomwareEPSS20.47%CriticalCVE-2016-3393microsoft · windows_10_1507 +8 moremicrosoft windows_10_1507Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."KEVEPSS68.47%HighCVE-2025-21246microsoft · windows_10_1507 +34 moreWindows Telephony Service Remote Code Execution VulnerabilityEPSS1.71%HighCVE-2025-21331microsoft · windows_10_1507 +30 moreWindows Installer Elevation of Privilege VulnerabilityEPSS1.06%MediumCVE-2025-21197microsoft · windows_10_1507 +34 moreWindows NTFS Information Disclosure VulnerabilityImproper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.EPSS3.25%MediumCVE-2025-21284microsoft · windows_10_1507 +25 moreWindows Virtual Trusted Platform Module Denial of Service VulnerabilityEPSS0.67%HighCVE-2025-21239microsoft · windows_10_1507 +25 moreWindows Telephony Service Remote Code Execution VulnerabilityEPSS1.51%MediumCVE-2025-21268microsoft · windows_10_1507 +34 moreMapUrlToZone Security Feature Bypass VulnerabilityEPSS1.95%MediumCVE-2025-21215microsoft · windows_10_1507 +34 moreSecure Boot Security Feature Bypass VulnerabilityEPSS0.80%MediumCVE-2025-21261microsoft · windows_10_1507 +34 moreWindows Digital Media Elevation of Privilege VulnerabilityEPSS0.77%