Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 1607

Is your version affected?

CVE Summary Score Published
CVE-2025-32706 Exploited Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 7.8 High May 13, 2025
CVE-2025-32701 Exploited Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-27468 Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 7.0 High May 13, 2025
CVE-2025-29969 Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute… 7.5 High May 13, 2025
CVE-2025-29967 Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a… 8.8 High May 13, 2025
CVE-2025-29966 Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network 8.8 High May 13, 2025
CVE-2025-29960 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29959 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium May 13, 2025
CVE-2025-29810 Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a… 7.5 High Apr 8, 2025
CVE-2025-29809 Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature… 7.1 High Apr 8, 2025
CVE-2025-27738 Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information… 6.5 Medium Apr 8, 2025
CVE-2025-27737 Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security… 8.6 High Apr 8, 2025
CVE-2025-27736 Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an… 5.5 Medium Apr 8, 2025
CVE-2025-27735 Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an… 6.0 Medium Apr 8, 2025
CVE-2025-27733 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-27732 Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate… 7.0 High Apr 8, 2025
CVE-2025-27727 Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to… 7.8 High Apr 8, 2025
CVE-2025-27491 Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network 7.1 High Apr 8, 2025
CVE-2025-27487 Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network 8.0 High Apr 8, 2025
CVE-2025-27483 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-27481 Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network 8.8 High Apr 8, 2025
CVE-2025-27484 Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an… 7.5 High Apr 8, 2025
CVE-2025-27469 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-26679 Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-26673 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized… 7.5 High Apr 8, 2025

Other Microsoft products