Microsoft Windows 10 Version 21H2 vulnerabilities
2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.
Total CVEs
2,906
CISA KEV
95
actively exploited
Public exploits
67
Exploited in wild
124
Severity breakdown
CRITICAL79HIGH2093MEDIUM721LOW13
Vulnerabilities
Page 134 of 146
CVE-2023-28253P4MEDIUMCVSS 5.5≥ 10.0.19043.0, < 10.0.19044.28462023-04-11
CVE-2023-28253 [MEDIUM] CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2022-41074P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.23642022-12-13
CVE-2022-41074 [MEDIUM] CVE-2022-41074: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2023-36722P4MEDIUMCVSS 4.4≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36722 [MEDIUM] CWE-284 CVE-2023-36722: Active Directory Domain Services Information Disclosure Vulnerability
Active Directory Domain Services Information Disclosure Vulnerability
nvd
CVE-2024-38143P4MEDIUMCVSS 4.2≥ 10.0.19043.0, < 10.0.19044.47802024-08-13
CVE-2024-38143 [MEDIUM] CWE-306 CVE-2024-38143: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21900P4MEDIUMCVSS 4.6≥ 10.0.19043.0, < 10.0.19044.14662022-01-11
CVE-2022-21900 [MEDIUM] CVE-2022-21900: Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2026-20828P4MEDIUMCVSS 4.6≥ 10.0.19044.0, < 10.0.19044.68092026-01-13
CVE-2026-20828 [MEDIUM] CWE-125 CVE-2026-20828: Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to d
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2025-59294P4MEDIUMCVSS 4.6≥ 10.0.19044.0, < 10.0.19044.64562025-10-14
CVE-2025-59294 [MEDIUM] CWE-200 CVE-2025-59294: Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unautho
Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-58528P4MEDIUMCVSS 4.6≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-58528 [MEDIUM] CWE-125 CVE-2026-58528: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2022-21921P4MEDIUMCVSS 4.4≥ 10.0.19043.0, < 10.0.19043.14662022-01-11
CVE-2022-21921 [MEDIUM] CVE-2022-21921: Windows Defender Credential Guard Security Feature Bypass Vulnerability
Windows Defender Credential Guard Security Feature Bypass Vulnerability
nvd
CVE-2026-50453P4MEDIUMCVSS 4.6≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50453 [MEDIUM] CWE-125 CVE-2026-50453: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-49794P4MEDIUMCVSS 4.6≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-49794 [MEDIUM] CWE-125 CVE-2026-49794: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2022-29121P4MEDIUMCVSS 6.5≥ 10.0.19043.0, < 10.0.19043.17062022-05-10
CVE-2022-29121 [MEDIUM] CVE-2022-29121: Windows WLAN AutoConfig Service Denial of Service Vulnerability
Windows WLAN AutoConfig Service Denial of Service Vulnerability
nvd
CVE-2025-21278P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21278 [MEDIUM] CWE-362 CVE-2025-21278: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
nvd
CVE-2025-59198P4MEDIUMCVSS 5.0≥ 10.0.19044.0, < 10.0.19044.64562025-10-14
CVE-2025-59198 [MEDIUM] CWE-20 CVE-2025-59198: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to den
Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
nvd
CVE-2024-30071P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-30071 [MEDIUM] CWE-126 CVE-2024-30071: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2024-30069P4MEDIUMCVSS 4.7≥ 10.0.19044.0, < 10.0.19044.45292024-06-11
CVE-2024-30069 [MEDIUM] CWE-126 CVE-2024-30069: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2023-36698P4MEDIUMCVSS 4.4≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36698 [MEDIUM] CWE-362 CVE-2023-36698: Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability
nvd
CVE-2022-24466P4MEDIUMCVSS 4.1≥ 10.0.19043.0, < 10.0.19044.17062022-05-10
CVE-2022-24466 [MEDIUM] CVE-2022-24466: Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-22002P4MEDIUMCVSS 5.5≥ 10.0.19043.0, < 10.0.19044.15262022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability
Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2025-21274P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21274 [MEDIUM] CWE-59 CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd