Microsoft Windows 10 21H2 vulnerabilities
3,754 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,754
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2696MEDIUM926LOW9
Vulnerabilities
Page 182 of 188
CVE-2026-50661P4MEDIUMCVSS 4.6fixed in 10.0.19044.75482026-07-14
CVE-2026-50661 [MEDIUM] CWE-693 CVE-2026-50661: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-83697P4MEDIUMCVSS 4.7fixed in 10.0.19044.78072026-10-13
CVE-2026-83697 [MEDIUM] CWE-367 CVE-2026-83697: Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-26175P4MEDIUMCVSS 4.6fixed in 10.0.19044.71842026-04-14
CVE-2026-26175 [MEDIUM] CWE-908 CVE-2026-26175: Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a se
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2025-54107P4MEDIUMCVSS 4.3fixed in 10.0.19044.63322025-09-09
CVE-2025-54107 [MEDIUM] CWE-41 CVE-2025-54107: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2025-54917P4MEDIUMCVSS 4.3fixed in 10.0.19044.63322025-09-09
CVE-2025-54917 [MEDIUM] CWE-693 CVE-2025-54917: Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a sec
Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-35642P4MEDIUMCVSS 6.5fixed in 10.0.19041.38032023-12-12
CVE-2023-35642 [MEDIUM] CWE-682 CVE-2023-35642: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2026-83926P4MEDIUMCVSS 4.4fixed in 10.0.19044.78072026-10-13
CVE-2026-83926 [MEDIUM] CWE-295 CVE-2026-83926: Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2025-21254P4MEDIUMCVSS 6.5fixed in 10.0.19044.54872025-02-11
CVE-2025-21254 [MEDIUM] CWE-125 CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21352P4MEDIUMCVSS 6.5fixed in 10.0.19044.54872025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21212P4MEDIUMCVSS 6.5fixed in 10.0.19044.54872025-02-11
CVE-2025-21212 [MEDIUM] CWE-125 CVE-2025-21212: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21216P4MEDIUMCVSS 6.5fixed in 10.0.19044.54872025-02-11
CVE-2025-21216 [MEDIUM] CWE-125 CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2024-38048P4MEDIUMCVSS 6.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38048 [MEDIUM] CWE-125 CVE-2024-38048: Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
nvd
CVE-2024-38105P4MEDIUMCVSS 6.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38105 [MEDIUM] CWE-20 CVE-2024-38105: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38101P4MEDIUMCVSS 6.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38101 [MEDIUM] CWE-125 CVE-2024-38101: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2024-38102P4MEDIUMCVSS 6.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38102 [MEDIUM] CWE-125 CVE-2024-38102: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
nvd
CVE-2026-83766P4MEDIUMCVSS 4.2fixed in 10.0.19044.78072026-10-13
CVE-2026-83766 [MEDIUM] CWE-863 CVE-2026-83766: Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security featur
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
nvd
CVE-2024-30096P4MEDIUMCVSS 5.5fixed in 10.0.19044.45292024-06-11
CVE-2024-30096 [MEDIUM] CWE-200 CVE-2024-30096: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5fixed in 10.0.19044.34482023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6fixed in 10.0.19044.53712025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2024-43546P4MEDIUMCVSS 5.6fixed in 10.0.19044.50112024-10-08
CVE-2024-43546 [MEDIUM] CWE-203 CVE-2024-43546: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd