Microsoft Windows 10 21H2 vulnerabilities
3,565 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,565
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL117HIGH2569MEDIUM870LOW9
Vulnerabilities
Page 51 of 179
CVE-2026-69424P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69424 [HIGH] CWE-122 CVE-2026-69424: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69426P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69426 [HIGH] CWE-122 CVE-2026-69426: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code loca
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
nvd
CVE-2026-69277P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69277 [HIGH] CWE-121 CVE-2026-69277: Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authoriz
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62739P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62739 [HIGH] CWE-122 CVE-2026-62739: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61355P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-61355 [HIGH] CWE-122 CVE-2026-61355: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62719P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62719 [HIGH] CWE-122 CVE-2026-62719: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61926P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-61926 [HIGH] CWE-122 CVE-2026-61926: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62770P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62770 [HIGH] CWE-122 CVE-2026-62770: Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-66799P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-66799 [HIGH] CWE-122 CVE-2026-66799: Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65790P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-65790 [HIGH] CWE-122 CVE-2026-65790: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62717P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62717 [HIGH] CWE-122 CVE-2026-62717: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62735P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62735 [HIGH] CWE-122 CVE-2026-62735: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62890P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62890 [HIGH] CWE-122 CVE-2026-62890: Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
nvd
CVE-2026-58601P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-58601 [HIGH] CWE-122 CVE-2026-58601: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50309P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50309 [HIGH] CWE-122 CVE-2026-50309: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-50407P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50407 [HIGH] CWE-122 CVE-2026-50407: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54987P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-54987 [HIGH] CWE-122 CVE-2026-54987: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50494P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50494 [HIGH] CWE-122 CVE-2026-50494: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-50499P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50499 [HIGH] CWE-122 CVE-2026-50499: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50417P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50417 [HIGH] CWE-20 CVE-2026-50417: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd