Microsoft Windows 10 1511 vulnerabilities

16 CVEs affecting Microsoft Windows 10 1511, 15 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-38396, published 2023-02-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-0147: Microsoft Windows SMBv1 Information Disclosure Vulnerability, published 2017-03-17. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 99.7% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability, published 2017-06-15. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-02-10. EPSS: 90% chance of exploitation in the next 30 days. Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows…
CVE-2017-0213: Microsoft Windows Privilege Escalation Vulnerability, published 2017-05-12. High severity, CVSS 7.3. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 84.3% chance of exploitation in the next 30 days. Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703,…
CVE-2016-7255: Microsoft Win32k Privilege Escalation Vulnerability, published 2016-11-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 81% chance of exploitation in the next 30 days. The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and…
CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability, published 2017-06-15. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 74.2% chance of exploitation in the next 30 days. Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012…
CVE-2016-3393: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability, published 2016-10-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 68.5% chance of exploitation in the next 30 days. Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and…
CVE-2016-7256: Microsoft Windows Open Type Font Remote Code Execution Vulnerability, published 2016-11-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 64.6% chance of exploitation in the next 30 days. atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,…
CVE-2016-0151: Microsoft Windows CSRSS Security Feature Bypass Vulnerability, published 2016-04-12. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 62.9% chance of exploitation in the next 30 days. The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local…
CVE-2016-0099: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability, published 2016-03-09. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 37% chance of exploitation in the next 30 days. The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and…
CVE-2016-3309: Microsoft Windows Kernel Privilege Escalation Vulnerability, published 2016-08-09. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-15. EPSS: 20.5% chance of exploitation in the next 30 days. The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and…

Latest

CVE-2022-38396, published 2023-02-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the…
CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability, published 2017-05-12. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-02-10. EPSS: 10% chance of exploitation in the next 30 days. The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows…
CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability, published 2017-03-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 11% chance of exploitation in the next 30 days. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10…
CVE-2017-0001: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability, published 2017-03-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 3.1% chance of exploitation in the next 30 days. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10…