Microsoft Windows 10 21H2 vulnerabilities
3,366 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,366
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL110HIGH2419MEDIUM828LOW9
Vulnerabilities
Page 38 of 169
CVE-2026-58640P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-58640 [HIGH] CWE-122 CVE-2026-58640: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-96916P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96916 [HIGH] CWE-122 CVE-2026-96916: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96843P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96843 [HIGH] CWE-122 CVE-2026-96843: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69909P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-69909 [HIGH] CWE-122 CVE-2026-69909: Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72927P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72927 [HIGH] CWE-122 CVE-2026-72927: Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70330P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-70330 [HIGH] CWE-122 CVE-2026-70330: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70304P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-70304 [HIGH] CWE-122 CVE-2026-70304: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50680P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50680 [HIGH] CWE-122 CVE-2026-50680: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54992P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-54992 [HIGH] CWE-122 CVE-2026-54992: Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-69478P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69478 [HIGH] CWE-122 CVE-2026-69478: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72941P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72941 [HIGH] CWE-122 CVE-2026-72941: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83967P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-83967 [HIGH] CWE-122 CVE-2026-83967: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69456P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69456 [HIGH] CWE-122 CVE-2026-69456: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69691P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69691 [HIGH] CWE-122 CVE-2026-69691: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69476P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69476 [HIGH] CWE-122 CVE-2026-69476: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69432P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69432 [HIGH] CWE-122 CVE-2026-69432: Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privile
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70583P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-70583 [HIGH] CWE-122 CVE-2026-70583: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72967P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72967 [HIGH] CWE-122 CVE-2026-72967: Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to ele
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83988P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-83988 [HIGH] CWE-122 CVE-2026-83988: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72944P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-72944 [HIGH] CWE-122 CVE-2026-72944: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
nvd