cbcvebase.

Microsoft Windows 10 Version 21H2 vulnerabilities

3,631 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs
3,631
CISA KEV
98
actively exploited
Public exploits
68
Exploited in wild
126
Severity breakdown
CRITICAL104HIGH2641MEDIUM873LOW13

Vulnerabilities

Page 16 of 182
CVE-2024-38240P3CRITICALCVSS 9.8≥ 10.0.19043.0, < 10.0.19044.48942024-09-10
CVE-2024-38240 [CRITICAL] CWE-125 CVE-2024-38240: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2026-49164P3CRITICALCVSS 9.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-49164 [CRITICAL] CWE-122 CVE-2026-49164: Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to ex Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-50380P3CRITICALCVSS 9.6≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50380 [CRITICAL] CWE-122 CVE-2026-50380: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-49724P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.60932025-07-08
CVE-2025-49724 [HIGH] CWE-416 CVE-2025-49724: Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to exec Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-20678P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-20678 [HIGH] CWE-843 CVE-2024-20678: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-29137P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19043.17062022-05-10
CVE-2022-29137 [HIGH] CVE-2022-29137: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-22014P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19043.17062022-05-10
CVE-2022-22014 [HIGH] CVE-2022-22014: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-22013P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19043.17062022-05-10
CVE-2022-22013 [HIGH] CVE-2022-22013: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-20840P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.68092026-01-13
CVE-2026-20840 [HIGH] CWE-122 CVE-2026-20840: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2023-36423P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19043.36932023-11-14
CVE-2023-36423 [HIGH] CWE-122 CVE-2023-36423: Microsoft Remote Registry Service Remote Code Execution Vulnerability Microsoft Remote Registry Service Remote Code Execution Vulnerability
nvd
CVE-2025-50171P3CRITICALCVSS 9.1≥ 10.0.19044.0, < 10.0.19044.62162025-08-12
CVE-2025-50171 [CRITICAL] CWE-862 CVE-2025-50171: Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing o Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-38148P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.34482023-09-12
CVE-2023-38148 [HIGH] CWE-121 CVE-2023-38148: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
nvd
CVE-2023-21676P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21676 [HIGH] CVE-2023-21676: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2025-24051P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.56082025-03-11
CVE-2025-24051 [HIGH] CWE-122 CVE-2025-24051: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-35641P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19041.38032023-12-12
CVE-2023-35641 [HIGH] CWE-682 CVE-2023-35641: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
nvd
CVE-2026-80096P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-80096 [HIGH] CWE-125 CVE-2026-80096: Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privi Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-70203P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-70203 [HIGH] CWE-122 CVE-2026-70203: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70586P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-70586 [HIGH] CWE-122 CVE-2026-70586: Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73006P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-73006 [HIGH] CWE-121 CVE-2026-73006: Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72960P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-72960 [HIGH] CWE-122 CVE-2026-72960: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
nvd
← Previous16 / 182Next →
Microsoft Windows 10 Version 21H2 vulnerabilities | cvebase