Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1607

Is your version affected?

CVE Summary Score Published
CVE-2026-26177 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Apr 14, 2026
CVE-2026-26176 Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate… 7.8 High Apr 14, 2026
CVE-2026-26173 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary… 7.0 High Apr 14, 2026
CVE-2026-26170 Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-26169 Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally 6.1 Medium Apr 14, 2026
CVE-2026-26168 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary… 7.8 High Apr 14, 2026
CVE-2026-26163 Double free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-26159 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker… 7.8 High Apr 14, 2026
CVE-2026-26156 Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-26152 Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate… 7.0 High Apr 14, 2026
CVE-2026-20928 Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an… 4.6 Medium Apr 14, 2026
CVE-2026-32212 Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an… 5.5 Medium Apr 14, 2026
CVE-2026-33098 Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges… 7.8 High Apr 14, 2026
CVE-2026-32217 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32202 Exploited Microsoft Windows Protection Mechanism Failure Vulnerability 4.3 Medium Apr 14, 2026
CVE-2026-32183 Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an… 7.8 High Apr 14, 2026
CVE-2026-0390 Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a… 6.7 Medium Apr 14, 2026
CVE-2026-32157 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Apr 14, 2026
CVE-2026-32154 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32156 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code… 7.4 High Apr 14, 2026
CVE-2026-32093 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery… 7.0 High Apr 14, 2026
CVE-2026-32089 Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32090 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered… 7.8 High Apr 14, 2026
CVE-2026-32087 Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges… 7.0 High Apr 14, 2026
CVE-2026-32083 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service… 7.0 High Apr 14, 2026

Other Microsoft products