Microsoft Windows 10 21H2 vulnerabilities
3,754 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,754
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2696MEDIUM926LOW9
Vulnerabilities
Page 167 of 188
CVE-2026-83887P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83887 [MEDIUM] CWE-125 CVE-2026-83887: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83898P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83898 [MEDIUM] CWE-125 CVE-2026-83898: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83904P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83904 [MEDIUM] CWE-125 CVE-2026-83904: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69318P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69318 [MEDIUM] CWE-125 CVE-2026-69318: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69627P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69627 [MEDIUM] CWE-125 CVE-2026-69627: Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disc
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69527P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69527 [MEDIUM] CWE-125 CVE-2026-69527: Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclos
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70290P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-70290 [MEDIUM] CWE-908 CVE-2026-70290: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68881P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-68881 [MEDIUM] CWE-125 CVE-2026-68881: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69367P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69367 [MEDIUM] CWE-125 CVE-2026-69367: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69308P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69308 [MEDIUM] CWE-125 CVE-2026-69308: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69770P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69770 [MEDIUM] CWE-908 CVE-2026-69770: Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose inf
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-72945P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-72945 [MEDIUM] CWE-908 CVE-2026-72945: Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose in
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69616P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69616 [MEDIUM] CWE-125 CVE-2026-69616: Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose info
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
nvd
CVE-2026-71341P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-71341 [MEDIUM] CWE-125 CVE-2026-71341: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69345P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69345 [MEDIUM] CWE-125 CVE-2026-69345: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69344P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69344 [MEDIUM] CWE-125 CVE-2026-69344: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-77492P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-77492 [MEDIUM] CWE-125 CVE-2026-77492: Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information loca
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69457P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69457 [MEDIUM] CWE-125 CVE-2026-69457: Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information local
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68895P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-68895 [MEDIUM] CWE-197 CVE-2026-68895: Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69568P4MEDIUMCVSS 5.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69568 [MEDIUM] CWE-125 CVE-2026-69568: Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose in
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
nvd