VendorsMicrosoftwindows_101607
Vulnerabilities

Microsoft Windows 10 1607

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2793CVEs
CVE-2017-11763
The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763.
Published 2017-10-13 · Modified
8.8EPSS 0.171
CVE-2018-8475
A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Modified
8.8EPSS 0.159
CVE-2018-8260
A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.
Published 2018-07-11 · Modified
8.8EPSS 0.155
CVE-2017-8625
Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".
Published 2017-08-08 · Modified
8.8EPSS 0.153
CVE-2021-38666
Remote Desktop Client Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
8.8EPSS 0.151
CVE-2020-1281
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.145
CVE-2019-1419
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1456.
Published 2019-11-12 · Modified
8.8EPSS 0.116
CVE-2019-1113
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.
Published 2019-07-29 · Modified
8.8EPSS 0.100
CVE-2020-16915
Media Foundation Memory Corruption Vulnerability
Published 2020-10-16 · Modified
8.8EPSS 0.098
CVE-2019-1456
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.
Published 2019-11-12 · Modified
8.8EPSS 0.097
CVE-2021-1678
Windows Print Spooler Spoofing Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.093
CVE-2020-0684
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.
Published 2020-03-12 · Modified
8.8EPSS 0.090
CVE-2021-36947
Windows Print Spooler Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
8.8EPSS 0.075
CVE-2020-1239
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.
Published 2020-06-09 · Modified
8.8EPSS 0.059
CVE-2018-8126
A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.
Published 2018-05-09 · Modified
8.8EPSS 0.056
CVE-2020-0801
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0807, CVE-2020-0809, CVE-2020-0869.
Published 2020-03-12 · Modified
8.8EPSS 0.053
CVE-2019-0995
A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.
Published 2019-05-16 · Modified
8.8EPSS 0.049
CVE-2022-30165
Windows Kerberos Elevation of Privilege Vulnerability
Published 2022-06-15 · Modified
8.8EPSS 0.049
CVE-2020-0869
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
Published 2020-03-12 · Modified
8.8EPSS 0.047
CVE-2022-26927
Windows Graphics Component Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.044
CVE-2020-1129
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.042
CVE-2017-8664
Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability".
Published 2017-08-08 · Modified
8.8EPSS 0.040
CVE-2019-1140
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
8.8EPSS 0.038
CVE-2020-1012
WinINet API Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.037
CVE-2022-35841
Windows Enterprise App Management Service Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.036
CVE-2021-24091
Windows Camera Codec Pack Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
8.8EPSS 0.034
CVE-2020-1255
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.034
CVE-2020-1509
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
8.8EPSS 0.033
CVE-2022-38034
Windows Workstation Service Elevation of Privilege Vulnerability
Published 2022-10-11 · Modified
8.8EPSS 0.032
CVE-2021-36970
Windows Print Spooler Spoofing Vulnerability
Published 2021-10-13 · Modified
8.8EPSS 0.031
CVE-2021-1669
Windows Remote Desktop Security Feature Bypass Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1664
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1674
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1671
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1673
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1666
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1660
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2021-1658
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
8.8EPSS 0.030
CVE-2020-1525
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
8.8EPSS 0.029
CVE-2020-1593
Windows Media Audio Decoder Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.028
← Prev10 / 70Next →