cbcvebase.

Microsoft Windows 10 21H2 vulnerabilities

3,736 known vulnerabilities affecting microsoft/windows_10_21h2.

Total CVEs
3,736
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2687MEDIUM917LOW9

Vulnerabilities

Page 107 of 187
CVE-2024-43551P3HIGHCVSS 7.8fixed in 10.0.19044.50112024-10-08
CVE-2024-43551 [HIGH] CWE-59 CVE-2024-43551: Windows Storage Elevation of Privilege Vulnerability Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2025-21275P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21275 [HIGH] CWE-285 CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability Windows App Package Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-49072P3HIGHCVSS 7.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49072 [HIGH] CWE-122 CVE-2024-49072: Windows Task Scheduler Elevation of Privilege Vulnerability Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-21281P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21281 [HIGH] CWE-416 CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability Microsoft COM for Windows Elevation of Privilege Vulnerability
nvd
CVE-2025-21304P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21304 [HIGH] CWE-416 CVE-2025-21304: Microsoft DWM Core Library Elevation of Privilege Vulnerability Microsoft DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2025-21234P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2025-21235P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21235 [HIGH] CWE-20 CVE-2025-21235: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2023-23422P3HIGHCVSS 7.8fixed in 10.0.19044.27282023-03-14
CVE-2023-23422 [HIGH] CVE-2023-23422: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-23423P3HIGHCVSS 7.8fixed in 10.0.19044.27282023-03-14
CVE-2023-23423 [HIGH] CVE-2023-23423: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28237P3HIGHCVSS 7.8fixed in 10.0.19044.28462023-04-11
CVE-2023-28237 [HIGH] CWE-190 CVE-2023-28237: Windows Kernel Remote Code Execution Vulnerability Windows Kernel Remote Code Execution Vulnerability
nvd
CVE-2023-36904P3HIGHCVSS 7.8fixed in 10.0.19044.33242023-08-08
CVE-2023-36904 [HIGH] CWE-126 CVE-2023-36904: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-26239P3HIGHCVSS 7.8fixed in 10.0.19044.42912024-04-09
CVE-2024-26239 [HIGH] CWE-122 CVE-2024-26239: Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2023-36729P3HIGHCVSS 7.8fixed in 10.0.19041.35702023-10-10
CVE-2023-36729 [HIGH] CWE-121 CVE-2023-36729: Named Pipe File System Elevation of Privilege Vulnerability Named Pipe File System Elevation of Privilege Vulnerability
nvd
CVE-2025-59200P3HIGHCVSS 7.7fixed in 10.0.19044.64562025-10-14
CVE-2025-59200 [HIGH] CWE-73 CVE-2025-59200: Concurrent execution using shared resource with improper synchronization ('race condition') in Data Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2025-21287P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21287 [HIGH] CWE-269 CVE-2025-21287: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-47973P3HIGHCVSS 7.8fixed in 10.0.19044.60932025-07-08
CVE-2025-47973 [HIGH] CWE-126 CVE-2025-47973: Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges l Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2025-47971P3HIGHCVSS 7.8fixed in 10.0.19044.60932025-07-08
CVE-2025-47971 [HIGH] CWE-126 CVE-2025-47971: Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges l Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-35353P3HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35353 [HIGH] CWE-59 CVE-2023-35353: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
nvd
CVE-2025-21382P3HIGHCVSS 7.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21382 [HIGH] CWE-122 CVE-2025-21382: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-32012P3HIGHCVSS 7.8fixed in 10.0.19044.30872023-06-14
CVE-2023-32012 [HIGH] CWE-59 CVE-2023-32012: Windows Container Manager Service Elevation of Privilege Vulnerability Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
← Previous107 / 187Next →
Microsoft Windows 10 21H2 vulnerabilities | cvebase