Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1607

Is your version affected?

CVE Summary Score Published
CVE-2025-25004 Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.3 High Oct 14, 2025
CVE-2025-59295 Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network 8.8 High Oct 14, 2025
CVE-2025-59294 Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to… 2.1 Low Oct 14, 2025
CVE-2025-59282 Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects… 7.0 High Oct 14, 2025
CVE-2025-59280 Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network 3.1 Low Oct 14, 2025
CVE-2025-59277 Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to… 7.8 High Oct 14, 2025
CVE-2025-59259 Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to… 6.5 Medium Oct 14, 2025
CVE-2025-59254 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-59242 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-59211 Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized… 5.5 Medium Oct 14, 2025
CVE-2025-59201 Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-59202 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-59200 Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service… 7.7 High Oct 14, 2025
CVE-2025-59196 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service… 7.0 High Oct 14, 2025
CVE-2025-59185 External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a… 6.5 Medium Oct 14, 2025
CVE-2025-58735 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 High Oct 14, 2025
CVE-2025-58732 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 High Oct 14, 2025
CVE-2025-58722 Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-58719 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges… 4.7 Medium Oct 14, 2025
CVE-2025-58717 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Oct 14, 2025
CVE-2025-58716 Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally 8.8 High Oct 14, 2025
CVE-2025-58715 Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally 8.8 High Oct 14, 2025
CVE-2025-55701 Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-55700 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Oct 14, 2025
CVE-2025-55687 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File… 7.4 High Oct 14, 2025

Other Microsoft products