Microsoft Windows 10 21H2 vulnerabilities
3,333 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,333
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL109HIGH2392MEDIUM823LOW9
Vulnerabilities
Page 16 of 167
CVE-2026-70203P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-70203 [HIGH] CWE-122 CVE-2026-70203: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70586P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-70586 [HIGH] CWE-122 CVE-2026-70586: Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73006P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-73006 [HIGH] CWE-121 CVE-2026-73006: Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72960P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72960 [HIGH] CWE-122 CVE-2026-72960: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69518P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69518 [HIGH] CWE-122 CVE-2026-69518: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69985P3HIGHCVSS 8.8fixed in 10.0.19044.78072026-10-13
CVE-2026-69985 [HIGH] CWE-122 CVE-2026-69985: Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50500P3HIGHCVSS 8.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50500 [HIGH] CWE-416 CVE-2026-50500: Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a networ
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-25188P3HIGHCVSS 8.8fixed in 10.0.19044.70582026-03-10
CVE-2026-25188 [HIGH] CWE-122 CVE-2026-25188: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate p
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2023-35630P3HIGHCVSS 8.8fixed in 10.0.19041.38032023-12-12
CVE-2023-35630 [HIGH] CWE-122 CVE-2023-35630: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
nvd
CVE-2024-30078P3HIGHCVSS 8.8fixed in 10.0.19044.45292024-06-11
CVE-2024-30078 [HIGH] CWE-20 CVE-2024-30078: Windows Wi-Fi Driver Remote Code Execution Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
nvd
CVE-2026-33827P3HIGHCVSS 8.1fixed in 10.0.19044.71842026-04-14
CVE-2026-33827 [HIGH] CWE-362 CVE-2026-33827: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-24949P3HIGHCVSS 7.8fixed in 10.0.19044.29652023-05-09
CVE-2023-24949 [HIGH] CWE-190 CVE-2023-24949: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-49708P3CRITICALCVSS 9.9fixed in 10.0.19044.64562025-10-14
CVE-2025-49708 [CRITICAL] CWE-416 CVE-2025-49708: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges o
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2025-26645P3HIGHCVSS 8.8fixed in 10.0.19044.56082025-03-11
CVE-2025-26645 [HIGH] CWE-23 CVE-2025-26645: Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code ove
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21371P3HIGHCVSS 8.8fixed in 10.0.19044.54872025-02-11
CVE-2025-21371 [HIGH] CWE-122 CVE-2025-21371: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2026-24294P3HIGHCVSS 7.8fixed in 10.0.19044.70582026-03-10
CVE-2026-24294 [HIGH] CWE-287 CVE-2026-24294: Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21407P3HIGHCVSS 8.8fixed in 10.0.19044.54872025-02-11
CVE-2025-21407 [HIGH] CWE-122 CVE-2025-21407: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21406P3HIGHCVSS 8.8fixed in 10.0.19044.54872025-02-11
CVE-2025-21406 [HIGH] CWE-416 CVE-2025-21406: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21190P3HIGHCVSS 8.8fixed in 10.0.19044.54872025-02-11
CVE-2025-21190 [HIGH] CWE-122 CVE-2025-21190: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21201P3HIGHCVSS 8.8fixed in 10.0.19044.54872025-02-11
CVE-2025-21201 [HIGH] CWE-415 CVE-2025-21201: Windows Telephony Server Remote Code Execution Vulnerability
Windows Telephony Server Remote Code Execution Vulnerability
nvd