Microsoft Windows 10 21H2 vulnerabilities
3,366 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,366
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL110HIGH2419MEDIUM828LOW9
Vulnerabilities
Page 22 of 169
CVE-2026-69786P3HIGHCVSS 8.1fixed in 10.0.19044.77252026-09-08
CVE-2026-69786 [HIGH] CWE-122 CVE-2026-69786: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50686P3HIGHCVSS 8.1fixed in 10.0.19044.75482026-07-14
CVE-2026-50686 [HIGH] CWE-843 CVE-2026-50686: Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85371P3HIGHCVSS 8.1fixed in 10.0.19044.78072026-10-13
CVE-2026-85371 [HIGH] CWE-416 CVE-2026-85371: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-54110P3HIGHCVSS 8.8fixed in 10.0.19044.63322025-09-09
CVE-2025-54110 [HIGH] CWE-190 CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42980P3HIGHCVSS 7.8fixed in 10.0.19044.74172026-06-09
CVE-2026-42980 [HIGH] CWE-122 CVE-2026-42980: Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elev
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69514P3HIGHCVSS 7.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69514 [HIGH] CWE-122 CVE-2026-69514: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execu
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69688P3HIGHCVSS 7.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69688 [HIGH] CWE-122 CVE-2026-69688: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-33829P3MEDIUMCVSS 4.3PoCfixed in 10.0.19044.71842026-04-14
CVE-2026-33829 [MEDIUM] CWE-200 CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-59295P3HIGHCVSS 8.8fixed in 10.0.19044.64562025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26205P3HIGHCVSS 8.8fixed in 10.0.19044.42912024-04-09
CVE-2024-26205 [HIGH] CWE-122 CVE-2024-26205: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26200P3HIGHCVSS 8.8fixed in 10.0.19044.42912024-04-09
CVE-2024-26200 [HIGH] CWE-122 CVE-2024-26200: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26179P3HIGHCVSS 8.8fixed in 10.0.19044.42912024-04-09
CVE-2024-26179 [HIGH] CWE-122 CVE-2024-26179: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30009P3HIGHCVSS 8.8fixed in 10.0.19044.44122024-05-14
CVE-2024-30009 [HIGH] CWE-197 CVE-2024-30009: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38115P3HIGHCVSS 8.8fixed in 10.0.19044.47802024-08-13
CVE-2024-38115 [HIGH] CWE-122 CVE-2024-38115: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-38130P3HIGHCVSS 8.8fixed in 10.0.19044.47802024-08-13
CVE-2024-38130 [HIGH] CWE-122 CVE-2024-38130: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30013P3HIGHCVSS 8.8fixed in 10.0.19044.46512024-07-09
CVE-2024-30013 [HIGH] CWE-415 CVE-2024-30013: Windows MultiPoint Services Remote Code Execution Vulnerability
Windows MultiPoint Services Remote Code Execution Vulnerability
nvd
CVE-2024-38114P3HIGHCVSS 8.8fixed in 10.0.19044.47802024-08-13
CVE-2024-38114 [HIGH] CWE-122 CVE-2024-38114: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2025-27477P3HIGHCVSS 8.8fixed in 10.0.19044.57372025-04-08
CVE-2025-27477 [HIGH] CWE-122 CVE-2025-27477: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-35303P3HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35303 [HIGH] CWE-20 CVE-2023-35303: USB Audio Class System Driver Remote Code Execution Vulnerability
USB Audio Class System Driver Remote Code Execution Vulnerability
nvd
CVE-2023-35302P3HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35302 [HIGH] CWE-122 CVE-2023-35302: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd