cbcvebase.

Microsoft Windows 10 21H2 vulnerabilities

3,338 known vulnerabilities affecting microsoft/windows_10_21h2.

Total CVEs
3,338
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL110HIGH2396MEDIUM823LOW9

Vulnerabilities

Page 20 of 167
CVE-2023-24885P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24885 [HIGH] CWE-843 CVE-2023-24885: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21727P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-21727 [HIGH] CWE-122 CVE-2023-21727: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-24887P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24887 [HIGH] CWE-191 CVE-2023-24887: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24928P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24928 [HIGH] CWE-122 CVE-2023-24928: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24926P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24926 [HIGH] CWE-122 CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24884P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-24884 [HIGH] CWE-681 CVE-2023-24884: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-28243P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-28243 [HIGH] CWE-843 CVE-2023-28243: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21239P3HIGHCVSS 8.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21241P3HIGHCVSS 8.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21241 [HIGH] CWE-122 CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21248P3HIGHCVSS 8.8fixed in 10.0.19044.53712025-01-14
CVE-2025-21248 [HIGH] CWE-122 CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2023-24876P3HIGHCVSS 8.8fixed in 10.0.19044.27282023-03-14
CVE-2023-24876 [HIGH] CWE-122 CVE-2023-24876: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2026-105008P3CRITICALCVSS 9.0fixed in 10.0.19044.78072026-10-13
CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-33066P3HIGHCVSS 8.8fixed in 10.0.19044.59652025-06-10
CVE-2025-33066 [HIGH] CWE-122 CVE-2025-33066: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-21695P3HIGHCVSS 8.8fixed in 10.0.19044.26042023-02-14
CVE-2023-21695 [HIGH] CWE-122 CVE-2023-21695: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2026-47289P3HIGHCVSS 8.8fixed in 10.0.19044.74172026-06-09
CVE-2026-47289 [HIGH] CWE-122 CVE-2026-47289: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73018P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83998P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-83998 [HIGH] CWE-122 CVE-2026-83998: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72986P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68828P3HIGHCVSS 8.8fixed in 10.0.19044.77252026-09-08
CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62785P3HIGHCVSS 8.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62785 [HIGH] CWE-122 CVE-2026-62785: Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
Microsoft Windows 10 21H2 vulnerabilities | cvebase