Microsoft Windows 10 Version 1607 vulnerabilities, page 4

4,514 vulnerabilities

Known vulnerabilities in Microsoft Windows 10 Version 1607, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2026-96910microsoft · windows 10 version 1607 +19 moreMicrosoft Windows Search Component Information Disclosure VulnerabilityUntrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.EPSS0.40%7.8HighCVE-2026-96867microsoft · windows 10 version 1607 +19 moreWindows NTFS Remote Code Execution VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.EPSS0.32%7.5HighCVE-2026-96866microsoft · windows 10 version 1607 +12 moreNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityOut-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.EPSS1.15%5.6MediumCVE-2026-96865microsoft · windows 10 version 1607 +15 moreWindows Secure Kernel Mode Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.EPSS0.36%9.8CriticalCVE-2026-96864microsoft · windows 10 version 1607 +12 moreMicrosoft Failover Cluster Virtual Driver Remote Code Execution VulnerabilityDouble free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.EPSS0.65%7.8HighCVE-2026-96862microsoft · windows 10 version 1607 +19 moreWindows Spaceport.sys Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.EPSS0.32%7.5HighCVE-2026-96861microsoft · windows 10 version 1607 +12 moreNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityOut-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.EPSS1.15%5.5MediumCVE-2026-96860microsoft · windows 10 version 1607 +19 moreWindows USB Print Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.EPSS0.40%5.5MediumCVE-2026-96859microsoft · windows 10 version 1607 +19 moreWindows Imaging Component Information Disclosure VulnerabilityOut-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.EPSS0.40%7.8HighCVE-2026-96856microsoft · windows_10_1607 +28 moreWindows Management Instrumentation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.EPSS0.31%5.5MediumCVE-2026-96854microsoft · windows_10_1607 +27 moreWindows Device Association Service Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.EPSS0.30%4.7MediumCVE-2026-96853microsoft · windows_10_1607 +28 moreWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.EPSS0.18%7HighCVE-2026-96852microsoft · windows_10_1607 +28 moreWindows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.EPSS0.25%5.5MediumCVE-2026-96851microsoft · windows_10_1607 +28 moreWindows Management Instrumentation Information Disclosure VulnerabilityBuffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.EPSS0.39%7.8HighCVE-2026-96847microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityUntrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%5.5MediumCVE-2026-96846microsoft · windows_10_1607 +28 moreWebDAV Information Disclosure VulnerabilityOut-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.EPSS0.30%8HighCVE-2026-96844microsoft · windows_10_1607 +28 moreMicrosoft Bluetooth Driver Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.EPSS0.47%7.8HighCVE-2026-96843microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%7.5HighCVE-2026-96325microsoft · windows_10_1607 +28 moreWindows SMB Server Denial of Service VulnerabilityMissing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.EPSS0.82%7.8HighCVE-2026-96324microsoft · windows_10_1607 +28 moreMicrosoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.EPSS0.31%