Microsoft Windows 10 21H2 vulnerabilities
3,745 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,745
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2691MEDIUM922LOW9
Vulnerabilities
Page 158 of 188
CVE-2023-28269P4MEDIUMCVSS 6.8fixed in 10.0.19044.28462023-04-11
CVE-2023-28269 [MEDIUM] CWE-122 CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2024-38013P4MEDIUMCVSS 6.7fixed in 10.0.19044.46512024-07-09
CVE-2024-38013 [MEDIUM] CWE-59 CVE-2024-38013: Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
nvd
CVE-2024-49101P4MEDIUMCVSS 6.6fixed in 10.0.19044.52472024-12-12
CVE-2024-49101 [MEDIUM] CWE-125 CVE-2024-49101: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49109P4MEDIUMCVSS 6.6fixed in 10.0.19044.52472024-12-12
CVE-2024-49109 [MEDIUM] CWE-125 CVE-2024-49109: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8fixed in 10.0.19044.74172026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2024-49081P4MEDIUMCVSS 6.6fixed in 10.0.19044.52472024-12-12
CVE-2024-49081 [MEDIUM] CWE-122 CVE-2024-49081: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49094P4MEDIUMCVSS 6.6fixed in 10.0.19044.52472024-12-12
CVE-2024-49094 [MEDIUM] CWE-122 CVE-2024-49094: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49111P4MEDIUMCVSS 6.6fixed in 10.0.19044.52472024-12-12
CVE-2024-49111 [MEDIUM] CWE-125 CVE-2024-49111: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2022-35754P4MEDIUMCVSS 6.7fixed in 10.0.19042.18892023-05-31
CVE-2022-35754 [MEDIUM] CVE-2022-35754: Unified Write Filter Elevation of Privilege Vulnerability
Unified Write Filter Elevation of Privilege Vulnerability
nvd
CVE-2026-69469P4MEDIUMCVSS 6.6fixed in 10.0.19044.77252026-09-08
CVE-2026-69469 [MEDIUM] CWE-122 CVE-2026-69469: Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthoriz
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2024-21316P4MEDIUMCVSS 6.1fixed in 10.0.19044.39302024-01-09
CVE-2024-21316 [MEDIUM] CWE-20 CVE-2024-21316: Windows Server Key Distribution Service Security Feature Bypass
Windows Server Key Distribution Service Security Feature Bypass
nvd
CVE-2024-21430P4MEDIUMCVSS 6.4fixed in 10.0.19044.41702024-03-12
CVE-2024-21430 [MEDIUM] CWE-125 CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-21339P4MEDIUMCVSS 6.4fixed in 10.0.19044.40462024-02-13
CVE-2024-21339 [MEDIUM] CWE-416 CVE-2024-21339: Windows USB Generic Parent Driver Remote Code Execution Vulnerability
Windows USB Generic Parent Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21242P4MEDIUMCVSS 5.9fixed in 10.0.19044.53712025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability
Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2026-49807P4MEDIUMCVSS 6.2fixed in 10.0.19044.75482026-07-14
CVE-2026-49807 [MEDIUM] CWE-200 CVE-2026-49807: Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50294P4MEDIUMCVSS 6.2fixed in 10.0.19044.75482026-07-14
CVE-2026-50294 [MEDIUM] CWE-497 CVE-2026-50294: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-27735P4MEDIUMCVSS 6.0fixed in 10.0.19044.57372025-04-08
CVE-2025-27735 [MEDIUM] CWE-345 CVE-2025-27735: Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclav
Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-50485P4MEDIUMCVSS 5.7fixed in 10.0.19044.75482026-07-14
CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2026-83907P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83907 [MEDIUM] CWE-497 CVE-2026-83907: Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69644P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-69644 [MEDIUM] CWE-497 CVE-2026-69644: Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
nvd