Microsoft Windows 10 Version 21H2 vulnerabilities
2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.
Total CVEs
2,906
CISA KEV
95
actively exploited
Public exploits
67
Exploited in wild
124
Severity breakdown
CRITICAL79HIGH2093MEDIUM721LOW13
Vulnerabilities
Page 137 of 146
CVE-2025-55695P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.64562025-10-14
CVE-2025-55695 [LOW] CWE-125 CVE-2025-55695: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose inf
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50419P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50419 [LOW] CWE-200 CVE-2026-50419: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-57085P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2022-21977P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19043.15862022-03-09
CVE-2022-21977 [LOW] CVE-2022-21977: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2024-38030MEDIUMCVSS 6.5≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-38030 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
cvelistv5
CVE-2024-26217P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19044.44122024-04-09
CVE-2024-26217 [LOW] CWE-125 CVE-2024-26217: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-26414MEDIUMCVSS 4.8≥ 10.0.0, < 10.0.19044.27282021-06-08
CVE-2021-26414 [MEDIUM] Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
cvelistv5
CVE-2022-34689HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.18892022-10-11
CVE-2022-34689 [HIGH] Windows CryptoAPI Spoofing Vulnerability
Windows CryptoAPI Spoofing Vulnerability
Windows CryptoAPI Spoofing Vulnerability
cvelistv5
CVE-2024-30081HIGHCVSS 7.1≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-30081 [HIGH] CWE-200 Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
cvelistv5
CVE-2025-21377MEDIUMCVSS 6.5≥ 10.0.19044.0, < 10.0.19044.54872025-02-11
CVE-2025-21377 [MEDIUM] CWE-73 NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
cvelistv5
CVE-2025-21312P4LOWCVSS 2.4≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21312 [LOW] CWE-908 CVE-2025-21312: Windows Smart Card Reader Information Disclosure Vulnerability
Windows Smart Card Reader Information Disclosure Vulnerability
nvd
CVE-2023-41772HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-41772 [HIGH] CWE-284 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-34729HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.20062022-09-13
CVE-2022-34729 [HIGH] Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-30087HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.45292024-06-11
CVE-2024-30087 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-36731HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36731 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-23299HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.15862022-03-09
CVE-2022-23299 [HIGH] Windows PDEV Elevation of Privilege Vulnerability
Windows PDEV Elevation of Privilege Vulnerability
Windows PDEV Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-38050HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-38050 [HIGH] Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-35750HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.18892023-05-31
CVE-2022-35750 [HIGH] Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-29371HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.30862023-06-13
CVE-2023-29371 [HIGH] CWE-20 Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-29358HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.30862023-06-13
CVE-2023-29358 [HIGH] CWE-416 Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
cvelistv5