cbcvebase.

Microsoft Windows 10 21H2 vulnerabilities

3,366 known vulnerabilities affecting microsoft/windows_10_21h2.

Total CVEs
3,366
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL110HIGH2419MEDIUM828LOW9

Vulnerabilities

Page 45 of 169
CVE-2026-69976P3HIGHCVSS 7.5fixed in 10.0.19044.78072026-10-13
CVE-2026-69976 [HIGH] CWE-416 CVE-2026-69976: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69997P3HIGHCVSS 7.5fixed in 10.0.19044.78072026-10-13
CVE-2026-69997 [HIGH] CWE-416 CVE-2026-69997: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-28227P3HIGHCVSS 7.5fixed in 10.0.19044.28462023-04-11
CVE-2023-28227 [HIGH] CWE-122 CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2026-69553P3HIGHCVSS 7.5fixed in 10.0.19044.77252026-09-08
CVE-2026-69553 [HIGH] CWE-862 CVE-2026-69553: Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-36900P3HIGHCVSS 7.8fixed in 10.0.19044.33242023-08-08
CVE-2023-36900 [HIGH] CWE-190 CVE-2023-36900: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-28275P3HIGHCVSS 8.8fixed in 10.0.19044.28462023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-35359P3HIGHCVSS 7.8fixed in 10.0.19044.33242023-08-08
CVE-2023-35359 [HIGH] CWE-23 CVE-2023-35359: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-29372P3HIGHCVSS 8.8fixed in 10.0.19044.30862023-06-14
CVE-2023-29372 [HIGH] CWE-122 CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32038P3HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-32038 [HIGH] CWE-416 CVE-2023-32038: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21797P3HIGHCVSS 8.8fixed in 10.0.19044.26042023-02-14
CVE-2023-21797 [HIGH] CWE-190 CVE-2023-21797: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21798P3HIGHCVSS 8.8fixed in 10.0.19044.26042023-02-14
CVE-2023-21798 [HIGH] CWE-125 CVE-2023-21798: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-35315P3HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35315 [HIGH] CWE-190 CVE-2023-35315: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2026-26178P3HIGHCVSS 8.8fixed in 10.0.19044.71842026-04-14
CVE-2026-26178 [HIGH] CWE-190 CVE-2026-26178: Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized att Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-21255P3HIGHCVSS 8.8fixed in 10.0.19044.69372026-02-10
CVE-2026-21255 [HIGH] CWE-284 CVE-2026-21255: Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security featur Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2024-20652P3HIGHCVSS 8.1fixed in 10.0.19044.39302024-01-09
CVE-2024-20652 [HIGH] CWE-73 CVE-2024-20652: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2024-20698P3HIGHCVSS 7.8fixed in 10.0.19044.39302024-01-09
CVE-2024-20698 [HIGH] CWE-190 CVE-2024-20698: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-41773P3HIGHCVSS 8.1fixed in 10.0.19041.35702023-10-10
CVE-2023-41773 [HIGH] CWE-416 CVE-2023-41773: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-41774P3HIGHCVSS 8.1fixed in 10.0.19041.35702023-10-10
CVE-2023-41774 [HIGH] CWE-416 CVE-2023-41774: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-41767P3HIGHCVSS 8.1fixed in 10.0.19041.35702023-10-10
CVE-2023-41767 [HIGH] CWE-416 CVE-2023-41767: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-38166P3HIGHCVSS 8.1fixed in 10.0.19041.35702023-10-10
CVE-2023-38166 [HIGH] CWE-416 CVE-2023-38166: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
← Previous45 / 169Next →
Microsoft Windows 10 21H2 vulnerabilities | cvebase