Microsoft Windows 10 21H2 vulnerabilities

CVE-2026-58545 [MEDIUM] CWE-284 CVE-2026-58545: Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

CVE-2026-81964 [MEDIUM] CWE-798 CVE-2026-81964: Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-70216 [MEDIUM] CWE-1220 CVE-2026-70216: Insufficient granularity of access control in Windows Mobile Device Management allows an authorized Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-83854 [MEDIUM] CWE-306 CVE-2026-83854: Improper access control in Windows Notification allows an authorized attacker to disclose informatio Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-87709 [MEDIUM] CWE-250 CVE-2026-87709: Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2024-30037 [MEDIUM] CWE-125 CVE-2024-30037: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-69474 [MEDIUM] CWE-126 CVE-2026-69474: Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

CVE-2026-69384 [HIGH] CWE-476 CVE-2026-69384: Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally. Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

CVE-2024-49110 [MEDIUM] CWE-125 CVE-2024-49110: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2023-35318 [MEDIUM] CWE-125 CVE-2023-35318: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-35319 [MEDIUM] CWE-125 CVE-2023-35319: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-35314 [MEDIUM] CWE-125 CVE-2023-35314: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-33164 [MEDIUM] CWE-125 CVE-2023-33164: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2024-49073 [MEDIUM] CWE-20 CVE-2024-49073: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49077 [MEDIUM] CWE-125 CVE-2024-49077: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability