Microsoft Windows 10 21H2 vulnerabilities

CVE-2025-55686 [HIGH] CWE-416 CVE-2025-55686: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

CVE-2025-55331 [HIGH] CWE-416 CVE-2025-55331: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

CVE-2026-83505 [HIGH] CWE-367 CVE-2026-83505: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83785 [HIGH] CWE-416 CVE-2026-83785: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2025-53134 [HIGH] CWE-200 CVE-2025-53134: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-69549 [HIGH] CWE-125 CVE-2026-69549: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83575 [HIGH] CWE-416 CVE-2026-83575: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83564 [HIGH] CWE-416 CVE-2026-83564: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69387 [HIGH] CWE-416 CVE-2026-69387: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83574 [HIGH] CWE-416 CVE-2026-83574: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70156 [HIGH] CWE-416 CVE-2026-70156: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-20869 [HIGH] CWE-362 CVE-2026-20869: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

CVE-2026-85355 [HIGH] CWE-829 CVE-2026-85355: Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-21240 [HIGH] CWE-367 CVE-2026-21240: Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-83676 [HIGH] CWE-122 CVE-2026-83676: Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70086 [HIGH] CWE-416 CVE-2026-70086: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70150 [HIGH] CWE-416 CVE-2026-70150: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70136 [HIGH] CWE-416 CVE-2026-70136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83689 [HIGH] CWE-416 CVE-2026-83689: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.