Windows 10 1507 vulnerabilities

166 known vulnerabilities in Windows 10 1507 from Microsoft. 147 are rated high or critical, and 132 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-0165Apr 12, 2016MicrosoftEPSS 13.7%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

• 7.8 High severity

  Microsoft Windows CSRSS Security Feature Bypass Exploited

  CVE-2016-0151Apr 12, 2016MicrosoftEPSS 62.8%

  The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows

• 7.8 High severity

  Microsoft Windows Secondary Logon Service Privilege Escalation Exploited

  CVE-2016-0099Mar 9, 2016MicrosoftEPSS 37%

  The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows lo

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2015-6175Dec 9, 2015MicrosoftEPSS 5.33%

  The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."

• 6.9 Medium severity

  Microsoft Win32k Memory Corruption Exploited

  CVE-2015-2546Sep 9, 2015MicrosoftEPSS 10.1%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted appli

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo