---
title: "Microsoft Windows 10 Version 1607 for x64-based Systems vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/microsoft/windows-10-version-1607-for-x64-based-systems
type: product
description: "Microsoft Windows 10 Version 1607 for x64-based Systems has 6,207 published CVEs, 155 in CISA KEV and 421 with public exploits."
updated: 2026-11-10
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Microsoft Windows 10 Version 1607 for x64-based Systems vulnerabilities

Vendor: [Microsoft](https://radicalnotion.ai/vendor/microsoft)

- **Published CVEs:** 6,207
- **In CISA KEV:** 155
- **With a public exploit:** 421
- **With a patch:** 6,207
- **Average CVSS:** 7.3
- **First CVE:** 2013-11-15
- **Latest CVE:** 2026-11-10

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 209 |
| High | 4,357 |
| Medium | 1,619 |
| Low | 22 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 840 |
| [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 621 |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 467 |
| [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 250 |
| [CWE-362](https://radicalnotion.ai/cwe/cwe-362) | Concurrent Execution using Shared Resource with Improper Synchronization | 190 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 180 |
| [CWE-269](https://radicalnotion.ai/cwe/cwe-269) | Improper Privilege Management | 174 |
| [CWE-190](https://radicalnotion.ai/cwe/cwe-190) | Integer Overflow or Wraparound | 146 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2016 | 83 |
| 2017 | 255 |
| 2018 | 220 |
| 2019 | 365 |
| 2020 | 624 |
| 2021 | 367 |
| 2022 | 449 |
| 2023 | 455 |
| 2024 | 405 |
| 2025 | 527 |
| 2026 | 2,455 |

## Affected versions (top 24 of 146)

| Version | Kind | CVEs |
| --- | --- | --- |
| \< 10.0.14393.9612 | range | 748 |
| \< 10.0.14393.9512 | range | 559 |
| \< 10.0.14393.9688 | range | 453 |
| \< 10.0.14393.9339 | range | 249 |
| \< 10.0.14393.9418 | range | 147 |
| \< 10.0.14393.7699 | range | 105 |
| \< 10.0.14393.9060 | range | 79 |
| \< 10.0.14393.9234 | range | 73 |
| \< 10.0.14393.8519 | range | 71 |
| \< 10.0.14393.6085 | range | 70 |
| \< 10.0.14393.8246 | range | 70 |
| \< 10.0.14393.7159 | range | 69 |
| 10.0.14393.9612 | patched | 748 |
| 10.0.14393.9512 | patched | 559 |
| 10.0.14393.9688 | patched | 453 |
| 10.0.14393.9339 | patched | 249 |
| 10.0.14393.9418 | patched | 147 |
| 10.0.14393.7699 | patched | 105 |
| 10.0.14393.9060 | patched | 79 |
| 10.0.14393.9234 | patched | 73 |
| 10.0.14393.8519 | patched | 71 |
| 10.0.14393.6085 | patched | 70 |
| 10.0.14393.8246 | patched | 70 |
| 10.0.14393.7159 | patched | 69 |

## CVEs (first 30 of 6,207, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-118148 | Active Directory Domain Services Elevation of Privilege Vulnerability | high | 7.5 | No | No | Yes |
| CVE-2026-119382 | Windows TPM Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122474 | Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability | medium | 5.9 | No | No | Yes |
| CVE-2026-122297 | Windows Kernel Transaction Manager Information Disclosure Vulnerability | medium | 5.5 | No | No | Yes |
| CVE-2026-122183 | Windows Kernel Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122182 | Windows Maps Elevation of Privilege Vulnerability | high | 7.0 | No | No | Yes |
| CVE-2026-122179 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | high | 7.0 | No | No | Yes |
| CVE-2026-122177 | Windows iSCSI Elevation of Privilege Vulnerability | high | 7.5 | No | No | Yes |
| CVE-2026-122176 | Windows SMB Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-122174 | Windows Task Scheduler Elevation of Privilege Vulnerability | high | 7.0 | No | No | Yes |
| CVE-2026-122173 | HID Parser Library Elevation of Privilege Vulnerability | medium | 6.8 | No | No | Yes |
| CVE-2026-122172 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122171 | Microsoft XPS Document Converter Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-122170 | Windows Win32k Elevation of Privilege Vulnerability | high | 7.0 | No | No | Yes |
| CVE-2026-122169 | Windows IKE Extension Spoofing Vulnerability | high | 7.5 | No | No | Yes |
| CVE-2026-122168 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122167 | Windows USB Driver Elevation of Privilege Vulnerability | medium | 6.8 | No | No | Yes |
| CVE-2026-122166 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122165 | Windows Client for NFS Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-122164 | Windows Kerberos Elevation of Privilege Vulnerability | high | 8.0 | No | No | Yes |
| CVE-2026-122163 | Windows Image Acquisition Remote Code Execution Vulnerability | high | 7.5 | No | No | Yes |
| CVE-2026-121680 | Windows NTLM Spoofing Vulnerability | high | 7.5 | No | No | Yes |
| CVE-2026-121673 | Windows Filter Manager Elevation of Privilege Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2026-121670 | Windows Overlay Filter Elevation of Privilege Vulnerability | high | 7.0 | No | No | Yes |
| CVE-2026-119988 | Windows SMB Remote Code Execution Vulnerability | high | 7.1 | No | No | Yes |
| CVE-2026-119972 | Remote Procedure Call Denial of Service Vulnerability | medium | 5.9 | No | No | Yes |
| CVE-2026-119969 | Graphic Fonts Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-119967 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | high | 8.1 | No | No | Yes |
| CVE-2026-119964 | Windows Message Queuing Remote Code Execution Vulnerability | high | 8.1 | No | No | Yes |
| CVE-2026-119963 | Windows Message Queuing Remote Code Execution Vulnerability | high | 8.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does Microsoft Windows 10 Version 1607 for x64-based Systems have?

Microsoft Windows 10 Version 1607 for x64-based Systems has 6,207 published CVE records since 2013.

### How many Microsoft Windows 10 Version 1607 for x64-based Systems CVEs are in CISA KEV?

155 of Microsoft Windows 10 Version 1607 for x64-based Systems's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

### Are there public exploits for Microsoft Windows 10 Version 1607 for x64-based Systems vulnerabilities?

Yes — 421 of Microsoft Windows 10 Version 1607 for x64-based Systems's CVEs have a known public exploit.

### Which versions of Microsoft Windows 10 Version 1607 for x64-based Systems are affected?

146 distinct Microsoft Windows 10 Version 1607 for x64-based Systems versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Microsoft Windows 10 Version 1607 for x64-based Systems CVEs?

Microsoft Windows 10 Version 1607 for x64-based Systems's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

### How many critical Microsoft Windows 10 Version 1607 for x64-based Systems vulnerabilities are there?

Microsoft Windows 10 Version 1607 for x64-based Systems has 209 critical and 4,357 high-severity CVEs.

### What is the average severity of Microsoft Windows 10 Version 1607 for x64-based Systems CVEs?

The average CVSS base score across Microsoft Windows 10 Version 1607 for x64-based Systems's scored CVEs is 7.3.

## Other products from this vendor

- [Windows](https://radicalnotion.ai/vendor/microsoft/windows) (11,263 CVEs)
- [Windows Server 2016](https://radicalnotion.ai/vendor/microsoft/windows-server-2016) (7,601 CVEs)
- [Windows Server 2019](https://radicalnotion.ai/vendor/microsoft/windows-server-2019) (7,521 CVEs)
- [Windows Server 2019 (Server Core installation)](https://radicalnotion.ai/vendor/microsoft/windows-server-2019-server-core-installation) (7,112 CVEs)
- [Windows 10 Version 1809 for x64-based Systems](https://radicalnotion.ai/vendor/microsoft/windows-10-version-1809-for-x64-based-systems) (6,747 CVEs)
- [Windows 10 Version 1809 for 32-bit Systems](https://radicalnotion.ai/vendor/microsoft/windows-10-version-1809-for-32-bit-systems) (6,600 CVEs)
- [Windows Server 2016 (Server Core installation)](https://radicalnotion.ai/vendor/microsoft/windows-server-2016-server-core-installation) (6,565 CVEs)
- [Windows 10 Version 1607 for 32-bit Systems](https://radicalnotion.ai/vendor/microsoft/windows-10-version-1607-for-32-bit-systems) (6,047 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/microsoft/windows-10-version-1607-for-x64-based-systems). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.