Microsoft Windows 10 21H2 vulnerabilities

1,584 known vulnerabilities affecting microsoft/windows_10_21h2.

Total CVEs
1,584
CISA KEV
86
actively exploited
Public exploits
31
Exploited in wild
55
Severity breakdown
CRITICAL39HIGH1118MEDIUM421LOW6

Vulnerabilities

Page 66 of 80
CVE-2023-36908MEDIUMCVSS 6.5fixed in 10.0.19044.33242023-08-08
CVE-2023-36908 [MEDIUM] CWE-200 CVE-2023-36908: Windows Hyper-V Information Disclosure Vulnerability Windows Hyper-V Information Disclosure Vulnerability
nvd
CVE-2023-20569MEDIUMCVSS 4.7fixed in 10.0.19044.33242023-08-08
CVE-2023-20569 [MEDIUM] CWE-203 CVE-2023-20569: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the retur A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
nvd
CVE-2023-32056CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-32056 [CRITICAL] CWE-59 CVE-2023-32056: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
nvd
CVE-2023-35366CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35366 [CRITICAL] CWE-20 CVE-2023-35366: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-35367CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35367 [CRITICAL] CWE-20 CVE-2023-35367: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-33154CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-33154 [CRITICAL] CWE-367 CVE-2023-33154: Windows Partition Management Driver Elevation of Privilege Vulnerability Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35365CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-32057CRITICALCVSS 9.8fixed in 10.0.19041.32082023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35343HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35343 [HIGH] CWE-426 CVE-2023-35343: Windows Geolocation Service Remote Code Execution Vulnerability Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2023-35313HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35313 [HIGH] CWE-416 CVE-2023-35313: Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
nvd
CVE-2023-33173HIGHCVSS 7.5fixed in 10.0.19041.32082023-07-11
CVE-2023-33173 [HIGH] CWE-126 CVE-2023-33173: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-32042HIGHCVSS 7.5fixed in 10.0.19041.32082023-07-11
CVE-2023-32042 [HIGH] CWE-908 CVE-2023-32042: OLE Automation Information Disclosure Vulnerability OLE Automation Information Disclosure Vulnerability
nvd
CVE-2023-35304HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35304 [HIGH] CWE-122 CVE-2023-35304: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-35328HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35328 [HIGH] CWE-197 CVE-2023-35328: Windows Transaction Manager Elevation of Privilege Vulnerability Windows Transaction Manager Elevation of Privilege Vulnerability
nvd
CVE-2023-35356HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35356 [HIGH] CWE-843 CVE-2023-35356: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-35302HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35302 [HIGH] CWE-122 CVE-2023-35302: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-35299HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35299 [HIGH] CWE-125 CVE-2023-35299: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-35364HIGHCVSS 8.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35364 [HIGH] CWE-190 CVE-2023-35364: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-35342HIGHCVSS 7.8fixed in 10.0.19041.32082023-07-11
CVE-2023-35342 [HIGH] CWE-59 CVE-2023-35342: Windows Image Acquisition Elevation of Privilege Vulnerability Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2023-33172HIGHCVSS 7.5fixed in 10.0.19041.32082023-07-11
CVE-2023-33172 [HIGH] CWE-126 CVE-2023-33172: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd