VendorsMicrosoftwindows_10_1607all versions
Vulnerabilities

Microsoft Windows 10 1607

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3513CVEs
CVE-2021-34527
Windows Print Spooler Remote Code Execution Vulnerability
Published 2021-07-02 · Analyzed
9.0KEVEPSS 0.998
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability
Published 2022-05-10 · Analyzed
9.0KEVEPSS 0.835
CVE-2026-105008
Windows Schannel Spoofing Vulnerability
Published 2026-10-13 · Analyzed
9.0EPSS 0.007
CVE-2021-40444
Microsoft MSHTML Remote Code Execution Vulnerability
Published 2021-09-15 · Analyzed
8.8KEVEPSS 0.978
CVE-2023-36025
Windows SmartScreen Security Feature Bypass Vulnerability
Published 2023-11-14 · Analyzed
8.8KEVEPSS 0.882
CVE-2025-33053
Internet Shortcut Files Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
8.8KEVEPSS 0.871
CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability
Published 2025-06-10 · Analyzed
8.8KEV1 PoCEPSS 0.828
CVE-2016-7200
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
Published 2016-11-10 · Analyzed
8.8KEV2 PoCEPSS 0.828
CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability
Published 2021-03-11 · Analyzed
8.8KEVEPSS 0.817
CVE-2016-7201
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
Published 2016-11-10 · Analyzed
8.8KEV2 PoCEPSS 0.800
CVE-2018-0824
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-05-09 · Analyzed
8.8KEV1 PoCEPSS 0.730
CVE-2020-1020
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.
Published 2020-04-15 · Analyzed
8.8KEVEPSS 0.650
CVE-2026-21510
Windows Shell Security Feature Bypass Vulnerability
Published 2026-02-10 · Analyzed
8.8KEVEPSS 0.612
CVE-2021-33742
Windows MSHTML Platform Remote Code Execution Vulnerability
Published 2021-06-08 · Analyzed
8.8KEVEPSS 0.594
CVE-2024-43461
Windows MSHTML Platform Spoofing Vulnerability
Published 2024-09-10 · Analyzed
8.8KEVEPSS 0.545
CVE-2025-53778
Windows NTLM Elevation of Privilege Vulnerability
Published 2025-08-12 · Modified
8.8EPSS 0.516
CVE-2013-3900
WinVerifyTrust Signature Validation Vulnerability
Published 2013-12-11 · Analyzed
8.8KEVEPSS 0.446
CVE-2023-21674
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published 2023-01-10 · Analyzed
8.8KEVEPSS 0.342
CVE-2024-38144
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published 2024-08-13 · Analyzed
8.8EPSS 0.323
CVE-2017-0222
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
Published 2017-05-12 · Analyzed
8.8KEVEPSS 0.296
CVE-2017-0149
Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.
Published 2017-03-17 · Analyzed
8.8KEVEPSS 0.285
CVE-2025-54918
Windows NTLM Elevation of Privilege Vulnerability
Published 2025-09-09 · Analyzed
8.8EPSS 0.272
CVE-2023-36017
Windows Scripting Engine Memory Corruption Vulnerability
Published 2023-11-14 · Modified
8.8EPSS 0.253
CVE-2022-41128
Windows Scripting Languages Remote Code Execution Vulnerability
Published 2022-11-09 · Analyzed
8.8KEVEPSS 0.246
CVE-2020-1380
Scripting Engine Memory Corruption Vulnerability
Published 2020-08-17 · Analyzed
8.8KEVEPSS 0.242
CVE-2017-0210
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
Published 2017-04-12 · Analyzed
8.8KEVEPSS 0.223
CVE-2024-20674
Windows Kerberos Security Feature Bypass Vulnerability
Published 2024-01-09 · Modified
8.8EPSS 0.172
CVE-2024-38060
Windows Imaging Component Remote Code Execution Vulnerability
Published 2024-07-09 · Modified
8.8EPSS 0.159
CVE-2026-21513
MSHTML Framework Security Feature Bypass Vulnerability
Published 2026-02-10 · Analyzed
8.8KEVEPSS 0.159
CVE-2025-29962
Windows Media Remote Code Execution Vulnerability
Published 2025-05-13 · Analyzed
8.8EPSS 0.156
CVE-2025-21293
Active Directory Domain Services Elevation of Privilege Vulnerability
Published 2025-01-14 · Analyzed
8.8EPSS 0.150
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability
Published 2024-11-12 · Analyzed
8.8KEVEPSS 0.142
CVE-2024-43532
Remote Registry Service Elevation of Privilege Vulnerability
Published 2024-10-08 · Analyzed
8.8EPSS 0.120
CVE-2026-96951
Windows Shell Security Feature Bypass Vulnerability
Published 2026-10-13 · Analyzed
8.8KEVEPSS 0.098
CVE-2025-53143
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
8.8EPSS 0.090
CVE-2025-53144
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
8.8EPSS 0.085
CVE-2025-53145
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
8.8EPSS 0.085
CVE-2023-35641
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Published 2023-12-12 · Modified
8.8EPSS 0.072
CVE-2023-35630
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Published 2023-12-12 · Modified
8.8EPSS 0.061
CVE-2024-30078
Windows Wi-Fi Driver Remote Code Execution Vulnerability
Published 2024-06-11 · Modified
8.8EPSS 0.052
← Prev5 / 88Next →