Filtered by vendor Microsoft Subscriptions
Filtered by product Windows 10 1607 Subscriptions
Total 1764 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-41049 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-18 5.4 Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2021-28446 1 Microsoft 18 Windows 10, Windows 10 1607, Windows 10 1809 and 15 more 2025-02-13 7.1 High
Windows Portmapping Information Disclosure Vulnerability
CVE-2023-24932 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 6.7 Medium
Secure Boot Security Feature Bypass Vulnerability
CVE-2023-29325 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 8.1 High
Windows OLE Remote Code Execution Vulnerability
CVE-2023-29324 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 6.5 Medium
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-24948 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 7 more 2025-02-11 7.4 High
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-24947 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 4 more 2025-02-11 8.8 High
Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-24946 1 Microsoft 11 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 8 more 2025-02-11 7.8 High
Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-24945 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 5.5 Medium
Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2023-24943 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 9.8 Critical
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-24903 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-24942 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 7.5 High
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24901 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 7.5 High
Windows NFS Portmapper Information Disclosure Vulnerability
CVE-2023-24940 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 7.5 High
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
CVE-2023-24900 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-11 5.9 Medium
Windows NTLM Security Support Provider Information Disclosure Vulnerability
CVE-2023-24939 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 7.5 High
Server for NFS Denial of Service Vulnerability
CVE-2023-28283 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 8.1 High
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-28251 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-11 5.5 Medium
Windows Driver Revocation List Security Feature Bypass Vulnerability
CVE-2020-1380 1 Microsoft 16 Internet Explorer, Windows 10 1507, Windows 10 1607 and 13 more 2025-02-11 7.8 High
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
CVE-2020-17087 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-02-11 7.8 High
Windows Kernel Local Elevation of Privilege Vulnerability