Microsoft Windows 10 21H2 vulnerabilities
3,565 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,565
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL117HIGH2569MEDIUM870LOW9
Vulnerabilities
Page 66 of 179
CVE-2026-85343P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-85343 [HIGH] CWE-59 CVE-2026-85343: Improper link resolution before file access ('link following') in Windows Hyper-V allows an authoriz
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96946P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96946 [HIGH] CWE-416 CVE-2026-96946: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96912P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96912 [HIGH] CWE-416 CVE-2026-96912: Use after free in Windows Client License Service allows an authorized attacker to elevate privileges
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97806P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-97806 [HIGH] CWE-416 CVE-2026-97806: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96947P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96947 [HIGH] CWE-416 CVE-2026-96947: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96950P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96950 [HIGH] CWE-416 CVE-2026-96950: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83857P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-83857 [HIGH] CWE-121 CVE-2026-83857: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85911P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-85911 [HIGH] CWE-416 CVE-2026-85911: Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50312P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50312 [HIGH] CWE-416 CVE-2026-50312: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96243P3HIGHCVSS 7.8fixed in 10.0.19044.78072026-10-13
CVE-2026-96243 [HIGH] CWE-59 CVE-2026-96243: Improper link resolution before file access ('link following') in Windows WalletService allows an au
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69407P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69407 [HIGH] CWE-190 CVE-2026-69407: Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate pri
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69324P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-69324 [HIGH] CWE-125 CVE-2026-69324: Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70584P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-70584 [HIGH] CWE-843 CVE-2026-70584: Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an au
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56177P3HIGHCVSS 7.8fixed in 10.0.19044.77252026-09-08
CVE-2026-56177 [HIGH] CWE-416 CVE-2026-56177: Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62698P3HIGHCVSS 7.8fixed in 10.0.19044.76632026-08-11
CVE-2026-62698 [HIGH] CWE-197 CVE-2026-62698: Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50337P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50337 [HIGH] CWE-704 CVE-2026-50337: Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate p
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50486P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50486 [HIGH] CWE-416 CVE-2026-50486: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58541P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-58541 [HIGH] CWE-843 CVE-2026-58541: Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized at
Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50493P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50493 [HIGH] CWE-416 CVE-2026-50493: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50433P3HIGHCVSS 7.8fixed in 10.0.19044.75482026-07-14
CVE-2026-50433 [HIGH] CWE-416 CVE-2026-50433: Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
nvd