Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1607

Is your version affected?

CVE Summary Score Published
CVE-2026-70216 Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to… 5.5 Medium Oct 13, 2026
CVE-2026-70262 Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network 8.8 High Oct 13, 2026
CVE-2026-69916 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70041 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70048 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-88165 Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88159 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.8 High Oct 13, 2026
CVE-2026-88160 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows… 7.0 High Oct 13, 2026
CVE-2026-88162 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering… 5.5 Medium Oct 13, 2026
CVE-2026-88173 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code… 8.1 High Oct 13, 2026
CVE-2026-87711 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85927 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-88096 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server… 7.0 High Oct 13, 2026
CVE-2026-87708 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-88080 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88101 Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88124 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-88091 Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-88158 Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-88161 Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-71347 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center… 6.4 Medium Oct 13, 2026
CVE-2026-85864 Improper privilege management in Python allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85871 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85865 Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally 5.5 Medium Oct 13, 2026
CVE-2026-85918 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026

Other Microsoft products