Microsoft Windows 10 21H2 vulnerabilities
3,736 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,736
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2687MEDIUM917LOW9
Vulnerabilities
Page 96 of 187
CVE-2026-69366P3HIGHCVSS 7.1fixed in 10.0.19044.77252026-09-08
CVE-2026-69366 [HIGH] CWE-416 CVE-2026-69366: Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69272P3HIGHCVSS 7.1fixed in 10.0.19044.77252026-09-08
CVE-2026-69272 [HIGH] CWE-122 CVE-2026-69272: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69313P3HIGHCVSS 7.1fixed in 10.0.19044.77252026-09-08
CVE-2026-69313 [HIGH] CWE-122 CVE-2026-69313: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-97817P3MEDIUMCVSS 6.5fixed in 10.0.19044.78072026-10-13
CVE-2026-97817 [MEDIUM] CWE-122 CVE-2026-97817: Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-32009P3HIGHCVSS 8.8fixed in 10.0.19044.30872023-06-14
CVE-2023-32009 [HIGH] CWE-284 CVE-2023-32009: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
nvd
CVE-2024-20696P3HIGHCVSS 7.3fixed in 10.0.19044.39302024-01-09
CVE-2024-20696 [HIGH] CWE-122 CVE-2024-20696: Windows libarchive Remote Code Execution Vulnerability
Windows libarchive Remote Code Execution Vulnerability
nvd
CVE-2026-23668P3HIGHCVSS 7.0fixed in 10.0.19044.70582026-03-10
CVE-2026-23668 [HIGH] CWE-362 CVE-2026-23668: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72961P3HIGHCVSS 8.2fixed in 10.0.19044.77252026-09-08
CVE-2026-72961 [HIGH] CWE-122 CVE-2026-72961: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38184P3HIGHCVSS 7.8fixed in 10.0.19044.46512024-08-13
CVE-2024-38184 [HIGH] CWE-125 CVE-2024-38184: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36047P3HIGHCVSS 7.8fixed in 10.0.19041.36932023-11-14
CVE-2023-36047 [HIGH] CWE-59 CVE-2023-36047: Windows Authentication Elevation of Privilege Vulnerability
Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2024-49090P3HIGHCVSS 7.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49090 [HIGH] CWE-822 CVE-2024-49090: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-32724P3HIGHCVSS 7.5fixed in 10.0.19044.59652025-06-10
CVE-2025-32724 [HIGH] CWE-400 CVE-2025-32724: Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allo
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-49088P3HIGHCVSS 7.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49088 [HIGH] CWE-126 CVE-2024-49088: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-21180P3HIGHCVSS 7.8fixed in 10.0.19044.56082025-03-11
CVE-2025-21180 [HIGH] CWE-122 CVE-2025-21180: Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-27729P3HIGHCVSS 7.8fixed in 10.0.19044.57372025-04-08
CVE-2025-27729 [HIGH] CWE-416 CVE-2025-27729: Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-69694P3HIGHCVSS 7.0fixed in 10.0.19044.77252026-09-08
CVE-2026-69694 [HIGH] CWE-502 CVE-2026-69694: Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authoriz
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49114P3HIGHCVSS 7.8fixed in 10.0.19044.52472024-12-12
CVE-2024-49114 [HIGH] CWE-820 CVE-2024-49114: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38133P3HIGHCVSS 7.8fixed in 10.0.19044.47802024-08-13
CVE-2024-38133 [HIGH] CWE-138 CVE-2024-38133: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38070P3HIGHCVSS 7.8fixed in 10.0.19044.46512024-07-09
CVE-2024-38070 [HIGH] CWE-693 CVE-2024-38070: Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
nvd
CVE-2024-38134P3HIGHCVSS 7.8fixed in 10.0.19044.47802024-08-13
CVE-2024-38134 [HIGH] CWE-125 CVE-2024-38134: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd