Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1507

Is your version affected?

CVE Summary Score Published
CVE-2025-21191 Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized… 7.0 High Apr 8, 2025
CVE-2025-21197 Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder… 6.5 Medium Apr 8, 2025
CVE-2025-24073 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-29824 Exploited Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 7.8 High Apr 8, 2025
CVE-2025-27742 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally 5.5 Medium Apr 8, 2025
CVE-2025-27741 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-27478 Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges… 7.0 High Apr 8, 2025
CVE-2025-27477 Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network 8.8 High Apr 8, 2025
CVE-2025-27473 Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network 7.5 High Apr 8, 2025
CVE-2025-27472 Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security… 5.4 Medium Apr 8, 2025
CVE-2025-27471 Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to… 5.9 Medium Apr 8, 2025
CVE-2025-26688 Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-26687 Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network 7.5 High Apr 8, 2025
CVE-2025-26686 Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code… 7.5 High Apr 8, 2025
CVE-2025-26668 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 7.5 High Apr 8, 2025
CVE-2025-26669 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 8.8 High Apr 8, 2025
CVE-2025-26665 Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate… 7.0 High Apr 8, 2025
CVE-2025-26663 Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code… 8.1 High Apr 8, 2025
CVE-2025-26645 Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Mar 11, 2025
CVE-2025-26633 Exploited Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability 7.0 High Mar 11, 2025
CVE-2025-24993 Exploited Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24992 Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally 5.5 Medium Mar 11, 2025
CVE-2025-24991 Exploited Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability 5.5 Medium Mar 11, 2025
CVE-2025-24985 Exploited Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24984 Exploited Microsoft Windows NTFS Information Disclosure Vulnerability 4.6 Medium Mar 11, 2025

Other Microsoft products