Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1607

Is your version affected?

CVE Summary Score Published
CVE-2026-20852 Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally 7.7 High Jan 13, 2026
CVE-2026-20844 Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally 7.4 High Jan 13, 2026
CVE-2026-20847 Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform… 6.5 Medium Jan 13, 2026
CVE-2026-20840 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Jan 13, 2026
CVE-2026-20839 Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose… 5.5 Medium Jan 13, 2026
CVE-2026-20836 Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an… 7.0 High Jan 13, 2026
CVE-2026-20834 Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack 4.6 Medium Jan 13, 2026
CVE-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability 7.8 High Jan 13, 2026
CVE-2026-20831 Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an… 7.8 High Jan 13, 2026
CVE-2026-20827 Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an… 5.5 Medium Jan 13, 2026
CVE-2026-20828 Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose… 4.6 Medium Jan 13, 2026
CVE-2026-20826 Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User… 7.8 High Jan 13, 2026
CVE-2026-20824 Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature… 5.5 Medium Jan 13, 2026
CVE-2026-20822 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.8 High Jan 13, 2026
CVE-2026-20823 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to… 5.5 Medium Jan 13, 2026
CVE-2026-20821 Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized… 6.2 Medium Jan 13, 2026
CVE-2026-20820 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High Jan 13, 2026
CVE-2026-20816 Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate… 7.8 High Jan 13, 2026
CVE-2026-20814 Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an… 7.0 High Jan 13, 2026
CVE-2026-20812 Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to… 6.5 Medium Jan 13, 2026
CVE-2026-20809 Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate… 7.8 High Jan 13, 2026
CVE-2026-20805 Exploited Microsoft Windows Information Disclosure Vulnerability 5.5 Medium Jan 13, 2026
CVE-2026-20804 Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally 7.7 High Jan 13, 2026
CVE-2026-21265 Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB 6.4 Medium Jan 13, 2026
CVE-2025-54100 Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an… 7.8 High Dec 9, 2025

Other Microsoft products