Windows 10 1511 vulnerabilities

15 known vulnerabilities in Windows 10 1511 from Microsoft. 15 are rated high or critical, and 15 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Microsoft Windows Search Remote Code Execution Exploited

  CVE-2017-8543Jun 15, 2017MicrosoftEPSS 74.2%

  Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows S

• 8.8 High severity

  Microsoft Windows Shell (.lnk) Remote Code Execution Exploited

  CVE-2017-8464Jun 15, 2017MicrosoftEPSS 90%

  Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2017-0263May 12, 2017MicrosoftEPSS 10%

  The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted

• 7.3 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2017-0213May 12, 2017MicrosoftEPSS 84.3%

  Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerabi

• 7.5 High severity

  Microsoft Windows SMBv1 Information Disclosure Exploited

  CVE-2017-0147Mar 17, 2017MicrosoftEPSS 99.7%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sen

• 7.8 High severity

  Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Exploited

  CVE-2017-0005Mar 17, 2017MicrosoftEPSS 11%

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

• 7.8 High severity

  Microsoft Graphics Device Interface (GDI) Privilege Escalation Exploited

  CVE-2017-0001Mar 17, 2017MicrosoftEPSS 3.11%

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a

• 8.8 High severity

  Microsoft Windows Open Type Font Remote Code Execution Exploited

  CVE-2016-7256Nov 10, 2016MicrosoftEPSS 64.6%

  atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attack

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-7255Nov 10, 2016MicrosoftEPSS 81%

  The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileg

• 7.8 High severity

  Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Exploited

  CVE-2016-3393Oct 14, 2016MicrosoftEPSS 68.5%

  Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2016-3309Aug 9, 2016MicrosoftEPSS 20.5%

  The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted appl

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-0167Apr 12, 2016MicrosoftEPSS 5.66%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2016-0165Apr 12, 2016MicrosoftEPSS 13.7%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application

• 7.8 High severity

  Microsoft Windows CSRSS Security Feature Bypass Exploited

  CVE-2016-0151Apr 12, 2016MicrosoftEPSS 62.8%

  The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows

• 7.8 High severity

  Microsoft Windows Secondary Logon Service Privilege Escalation Exploited

  CVE-2016-0099Mar 9, 2016MicrosoftEPSS 37%

  The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows lo