Microsoft Windows 10 1507 vulnerabilities

1,230 CVEs affecting Microsoft Windows 10 1507, 132 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-64680, published 2025-12-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-34527: Microsoft Windows Print Spooler Remote Code Execution Vulnerability, published 2021-07-02. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run…
• CVE-2017-0147: Microsoft Windows SMBv1 Information Disclosure Vulnerability, published 2017-03-17. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 99.7% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
• CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability, published 2022-06-01. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-14. EPSS: 99.2% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run…
• CVE-2023-36884: Microsoft Windows Search Remote Code Execution Vulnerability, published 2023-07-11. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-07-17. EPSS: 98.9% chance of exploitation in the next 30 days. Windows Search Remote Code Execution Vulnerability
• CVE-2021-40444: Microsoft MSHTML Remote Code Execution Vulnerability, published 2021-09-15. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 97.8% chance of exploitation in the next 30 days. Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability…
• CVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerability, published 2020-01-14. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 89.4% chance of exploitation in the next 30 days. A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed…
• CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability, published 2023-11-14. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2023-11-14. EPSS: 88.1% chance of exploitation in the next 30 days. Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2025-33053: Microsoft Windows External Control of File Name or Path Vulnerability, published 2025-06-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-06-10. EPSS: 87% chance of exploitation in the next 30 days. External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
• CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability, published 2024-11-12. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2024-11-12. EPSS: 85.4% chance of exploitation in the next 30 days. NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2021-1675: Microsoft Windows Print Spooler Remote Code Execution Vulnerability, published 2021-06-08. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 85.3% chance of exploitation in the next 30 days. Windows Print Spooler Remote Code Execution Vulnerability

Latest

• CVE-2025-64680, published 2025-12-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
• CVE-2025-64679, published 2025-12-09. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
• CVE-2025-62209, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
• CVE-2025-62208, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
• CVE-2025-59295, published 2025-10-14. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
• CVE-2025-59294, published 2025-10-14. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack.
• CVE-2025-59282, published 2025-10-14. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
• CVE-2025-59280, published 2025-10-14. Low severity, CVSS 3.1. EPSS: 0.5% chance of exploitation in the next 30 days. Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
• CVE-2025-59278, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
• CVE-2025-59277, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.