Microsoft Windows 10 21H2 vulnerabilities
3,333 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,333
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL109HIGH2392MEDIUM823LOW9
Vulnerabilities
Page 19 of 167
CVE-2026-47653P3HIGHCVSS 8.8fixed in 10.0.19044.74172026-06-09
CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42975P3HIGHCVSS 8.8fixed in 10.0.19044.75482026-07-14
CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-40398P3HIGHCVSS 7.8fixed in 10.0.19044.72912026-05-12
CVE-2026-40398 [HIGH] CWE-122 CVE-2026-40398: Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20860P3HIGHCVSS 7.8fixed in 10.0.19044.68092026-01-13
CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33837P3HIGHCVSS 7.8fixed in 10.0.19044.72912026-05-12
CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62792P3HIGHCVSS 8.1fixed in 10.0.19044.76632026-08-11
CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56649P3HIGHCVSS 8.1fixed in 10.0.19044.75482026-07-14
CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26230P3HIGHCVSS 7.8fixed in 10.0.19044.42912024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2025-50177P3HIGHCVSS 8.1fixed in 10.0.19044.62162025-08-12
CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49104P3HIGHCVSS 8.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49102P3HIGHCVSS 8.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21223P3HIGHCVSS 8.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43622P3HIGHCVSS 8.8fixed in 10.0.19044.51312024-11-12
CVE-2024-43622 [HIGH] CWE-122 CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43620P3HIGHCVSS 8.8fixed in 10.0.19044.51312024-11-12
CVE-2024-43620 [HIGH] CWE-122 CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43621P3HIGHCVSS 8.8fixed in 10.0.19044.51312024-11-12
CVE-2024-43621 [HIGH] CWE-122 CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2023-24886P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24886 [HIGH] CWE-908 CVE-2023-24886: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24925P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24925 [HIGH] CWE-416 CVE-2023-24925: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24929P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24929 [HIGH] CWE-843 CVE-2023-24929: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24927P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24927 [HIGH] CWE-843 CVE-2023-24927: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24924P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24924 [HIGH] CWE-125 CVE-2023-24924: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd