Microsoft Windows 10 21H2 vulnerabilities
3,754 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,754
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2696MEDIUM926LOW9
Vulnerabilities
Page 183 of 188
CVE-2024-30016P4MEDIUMCVSS 5.5fixed in 10.0.19044.44122024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38056P4MEDIUMCVSS 5.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38056 [MEDIUM] CWE-125 CVE-2024-38056: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5fixed in 10.0.19044.46512024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2023-36428P4MEDIUMCVSS 5.5fixed in 10.0.19041.36932023-11-14
CVE-2023-36428 [MEDIUM] CWE-125 CVE-2023-36428: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
nvd
CVE-2025-21257P4MEDIUMCVSS 5.5fixed in 10.0.19044.53712025-01-14
CVE-2025-21257 [MEDIUM] CWE-125 CVE-2025-21257: Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
nvd
CVE-2025-21374P4MEDIUMCVSS 5.5fixed in 10.0.19044.53712025-01-14
CVE-2025-21374 [MEDIUM] CWE-125 CVE-2025-21374: Windows CSC Service Information Disclosure Vulnerability
Windows CSC Service Information Disclosure Vulnerability
nvd
CVE-2023-36724P4MEDIUMCVSS 5.5fixed in 10.0.19041.35702023-10-10
CVE-2023-36724 [MEDIUM] CWE-287 CVE-2023-36724: Windows Power Management Service Information Disclosure Vulnerability
Windows Power Management Service Information Disclosure Vulnerability
nvd
CVE-2023-32039P4MEDIUMCVSS 5.5fixed in 10.0.19041.32082023-07-11
CVE-2023-32039 [MEDIUM] CWE-125 CVE-2023-32039: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-32085P4MEDIUMCVSS 5.5fixed in 10.0.19041.32082023-07-11
CVE-2023-32085 [MEDIUM] CWE-126 CVE-2023-32085: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-35324P4MEDIUMCVSS 5.5fixed in 10.0.19041.32082023-07-11
CVE-2023-35324 [MEDIUM] CWE-126 CVE-2023-35324: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-35306P4MEDIUMCVSS 5.5fixed in 10.0.19041.32082023-07-11
CVE-2023-35306 [MEDIUM] CWE-20 CVE-2023-35306: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-35341P4MEDIUMCVSS 5.5fixed in 10.0.19041.32082023-07-11
CVE-2023-35341 [MEDIUM] CWE-190 CVE-2023-35341: Microsoft DirectMusic Information Disclosure Vulnerability
Microsoft DirectMusic Information Disclosure Vulnerability
nvd
CVE-2023-21697P4MEDIUMCVSS 5.5fixed in 10.0.19044.26042023-02-14
CVE-2023-21697 [MEDIUM] CWE-126 CVE-2023-21697: Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
nvd
CVE-2023-23394P4MEDIUMCVSS 5.5fixed in 10.0.19044.27282023-03-14
CVE-2023-23394 [MEDIUM] CWE-822 CVE-2023-23394: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
nvd
CVE-2023-23409P4MEDIUMCVSS 5.5fixed in 10.0.19044.27282023-03-14
CVE-2023-23409 [MEDIUM] CWE-20 CVE-2023-23409: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
nvd
CVE-2026-45606P4MEDIUMCVSS 5.5fixed in 10.0.19044.74172026-06-09
CVE-2026-45606 [MEDIUM] CWE-125 CVE-2026-45606: Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny
Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.
nvd
CVE-2026-83909P4MEDIUMCVSS 4.7fixed in 10.0.19044.78072026-10-13
CVE-2026-83909 [MEDIUM] CWE-497 CVE-2026-83909: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69483P4MEDIUMCVSS 4.7fixed in 10.0.19044.77252026-09-08
CVE-2026-69483 [MEDIUM] CWE-125 CVE-2026-69483: Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69895P4MEDIUMCVSS 4.7fixed in 10.0.19044.77252026-09-08
CVE-2026-69895 [MEDIUM] CWE-125 CVE-2026-69895: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83788P4MEDIUMCVSS 4.6fixed in 10.0.19044.78072026-10-13
CVE-2026-83788 [MEDIUM] CWE-126 CVE-2026-83788: Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a phy
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
nvd