cbcvebase.

Microsoft Windows 10 21H2 vulnerabilities

3,754 known vulnerabilities affecting microsoft/windows_10_21h2.

Total CVEs
3,754
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2696MEDIUM926LOW9

Vulnerabilities

Page 175 of 188
CVE-2026-62743P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-62743 [MEDIUM] CWE-125 CVE-2026-62743: Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62796P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-62796 [MEDIUM] CWE-125 CVE-2026-62796: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-65662P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-65662 [MEDIUM] CWE-125 CVE-2026-65662: Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62786P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-62786 [MEDIUM] CWE-125 CVE-2026-62786: Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62738P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-62738 [MEDIUM] CWE-125 CVE-2026-62738: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
nvd
CVE-2026-65784P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-65784 [MEDIUM] CWE-125 CVE-2026-65784: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62703P4MEDIUMCVSS 5.5fixed in 10.0.19044.76632026-08-11
CVE-2026-62703 [MEDIUM] CWE-125 CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50437P4MEDIUMCVSS 5.5fixed in 10.0.19044.75482026-07-14
CVE-2026-50437 [MEDIUM] CWE-125 CVE-2026-50437: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-42906P4MEDIUMCVSS 5.5fixed in 10.0.19044.74172026-06-09
CVE-2026-42906 [MEDIUM] CWE-200 CVE-2026-42906: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83765P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83765 [MEDIUM] CWE-125 CVE-2026-83765: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83668P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83668 [MEDIUM] CWE-125 CVE-2026-83668: Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information loc Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85374P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-85374 [MEDIUM] CWE-125 CVE-2026-85374: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85830P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-85830 [MEDIUM] CWE-125 CVE-2026-85830: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-42968P4MEDIUMCVSS 5.5fixed in 10.0.19044.74172026-06-09
CVE-2026-42968 [MEDIUM] CWE-125 CVE-2026-42968: Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96860P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-96860 [MEDIUM] CWE-125 CVE-2026-96860: Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96927P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-96927 [MEDIUM] CWE-125 CVE-2026-96927: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32084P4MEDIUMCVSS 5.5fixed in 10.0.19044.71842026-04-14
CVE-2026-32084 [MEDIUM] CWE-200 CVE-2026-32084: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32079P4MEDIUMCVSS 5.5fixed in 10.0.19044.71842026-04-14
CVE-2026-32079 [MEDIUM] CWE-200 CVE-2026-32079: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-34346P4MEDIUMCVSS 5.5fixed in 10.0.19044.75482026-07-14
CVE-2026-34346 [MEDIUM] CWE-319 CVE-2026-34346: Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock all Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83798P4MEDIUMCVSS 5.5fixed in 10.0.19044.78072026-10-13
CVE-2026-83798 [MEDIUM] CWE-20 CVE-2026-83798: Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
nvd
Microsoft Windows 10 21H2 vulnerabilities | cvebase