Vulnerabilities > Microsoft > Windows 10 1507

DATE CVE VULNERABILITY TITLE RISK
2016-04-12 CVE-2016-0151 Unspecified vulnerability in Microsoft products
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
local
low complexity
microsoft
7.8
2016-03-09 CVE-2016-0099 Classic Buffer Overflow vulnerability in Microsoft products
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."
local
low complexity
microsoft CWE-120
7.8
2015-12-09 CVE-2015-6175 Unspecified vulnerability in Microsoft Windows 10 1507
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."
local
low complexity
microsoft
7.8
2013-12-11 CVE-2013-3900 Improper Verification of Cryptographic Signature vulnerability in Microsoft products
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11.
local
low complexity
microsoft CWE-347
5.5