VendorsMicrosoftwindows_10_1607all versions
Vulnerabilities

Microsoft Windows 10 1607

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3513CVEs
CVE-2026-96113
Windows Domain Name Service Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.009
CVE-2026-97815
Windows Error Reporting Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.009
CVE-2026-83789
Windows SMB Client Elevation of Privilege Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.009
CVE-2026-57090
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2026-58594
Remote Desktop Client Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2026-83869
Windows Domain Name Service Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.008
CVE-2026-49164
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2026-50439
Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2026-50694
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2026-54995
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.008
CVE-2023-33154
Windows Partition Management Driver Elevation of Privilege Vulnerability
Published 2023-07-11 · Modified
9.8EPSS 0.008
CVE-2026-57089
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.007
CVE-2026-96096
Windows Media Player Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.007
CVE-2026-85928
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.006
CVE-2026-96864
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Published 2026-10-13 · Analyzed
9.8EPSS 0.006
CVE-2026-56188
Windows Server Network driver Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.006
CVE-2026-47304
.NET Security Feature Bypass Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.003
CVE-2026-50380
Windows GDI+ Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.6EPSS 0.008
CVE-2017-0148
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.
Published 2017-03-17 · Analyzed
9.3KEV3 PoCEPSS 0.994
CVE-2017-0144
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.
Published 2017-03-17 · Analyzed
9.3KEV6 PoCEPSS 0.992
CVE-2022-30190
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Published 2022-06-01 · Analyzed
9.3KEVEPSS 0.992
CVE-2017-0143
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.
Published 2017-03-17 · Analyzed
9.3KEV4 PoCEPSS 0.933
CVE-2017-8464
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."
Published 2017-06-15 · Analyzed
9.3KEV2 PoCEPSS 0.900
CVE-2017-0146
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148.
Published 2017-03-17 · Analyzed
9.3KEV4 PoCEPSS 0.899
CVE-2017-0145
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148.
Published 2017-03-17 · Analyzed
9.3KEV3 PoCEPSS 0.899
CVE-2017-8759
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Published 2017-09-13 · Analyzed
9.3KEV1 PoCEPSS 0.887
CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
Published 2021-06-08 · Analyzed
9.3KEVEPSS 0.853
CVE-2017-8540
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8541.
Published 2017-05-26 · Analyzed
9.3KEV1 PoCEPSS 0.719
CVE-2016-3393
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."
Published 2016-10-14 · Analyzed
9.3KEVEPSS 0.685
CVE-2016-7256
atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."
Published 2016-11-10 · Analyzed
9.3KEVEPSS 0.646
CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
Published 2019-01-08 · Analyzed
9.3KEV1 PoCEPSS 0.532
CVE-2021-34448
Scripting Engine Memory Corruption Vulnerability
Published 2021-07-16 · Analyzed
9.3KEVEPSS 0.401
CVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability
Published 2021-06-08 · Analyzed
9.3KEVEPSS 0.223
CVE-2019-0903
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
Published 2019-05-16 · Analyzed
9.3KEVEPSS 0.217
CVE-2026-49798
Windows Kernel Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
9.3EPSS 0.004
CVE-2024-38159
Windows Network Virtualization Remote Code Execution Vulnerability
Published 2024-08-13 · Analyzed
9.1EPSS 0.022
CVE-2024-38160
Windows Network Virtualization Remote Code Execution Vulnerability
Published 2024-08-13 · Analyzed
9.1EPSS 0.022
CVE-2023-21557
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Published 2023-01-10 · Modified
9.1EPSS 0.021
CVE-2026-96252
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published 2026-10-13 · Analyzed
9.1EPSS 0.006
CVE-2026-45602
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Published 2026-06-09 · Modified
9.1EPSS 0.004
← Prev4 / 88Next →