Microsoft Windows 10 21H2 vulnerabilities

CVE-2025-49726 [HIGH] CWE-416 CVE-2025-49726: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVE-2026-70015 [HIGH] CWE-122 CVE-2026-70015: Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-49785 [HIGH] CWE-404 CVE-2026-49785: Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-83570 [HIGH] CWE-416 CVE-2026-83570: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83508 [HIGH] CWE-125 CVE-2026-83508: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69957 [HIGH] CWE-126 CVE-2026-69957: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83567 [HIGH] CWE-125 CVE-2026-83567: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69952 [HIGH] CWE-125 CVE-2026-69952: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

CVE-2026-85808 [HIGH] CWE-125 CVE-2026-85808: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-85843 [HIGH] CWE-908 CVE-2026-85843: Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2025-64673 [HIGH] CWE-284 CVE-2025-64673: Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges lo Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-108136 [HIGH] CWE-416 CVE-2026-108136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70228 [HIGH] CWE-125 CVE-2026-70228: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-25175 [HIGH] CWE-125 CVE-2026-25175: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-45607 [HIGH] CWE-125 CVE-2026-45607: Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-105004 [HIGH] CWE-125 CVE-2026-105004: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83832 [HIGH] CWE-125 CVE-2026-83832: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-103553 [HIGH] CWE-125 CVE-2026-103553: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96324 [HIGH] CWE-416 CVE-2026-96324: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.