cbcvebase.

Microsoft Windows 10 Version 21H2 vulnerabilities

3,631 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs
3,631
CISA KEV
98
actively exploited
Public exploits
68
Exploited in wild
126
Severity breakdown
CRITICAL104HIGH2642MEDIUM872LOW13

Vulnerabilities

Page 171 of 182
CVE-2026-78516P4MEDIUMCVSS 4.3≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-78516 [MEDIUM] CWE-126 CVE-2026-78516: Insertion of sensitive information into externally-accessible file or directory in Windows Storage a Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
nvd
CVE-2026-78455P4MEDIUMCVSS 4.3≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-78455 [MEDIUM] CWE-125 CVE-2026-78455: Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical a Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2022-24466P4MEDIUMCVSS 4.1≥ 10.0.19043.0, < 10.0.19044.17062022-05-10
CVE-2022-24466 [MEDIUM] CVE-2022-24466: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-22002P4MEDIUMCVSS 5.5≥ 10.0.19043.0, < 10.0.19044.15262022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2025-21274P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21274 [MEDIUM] CWE-59 CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2024-26172P4MEDIUMCVSS 5.5≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-26172 [MEDIUM] CWE-125 CVE-2024-26172: Windows DWM Core Library Information Disclosure Vulnerability Windows DWM Core Library Information Disclosure Vulnerability
nvd
CVE-2025-21284P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21284 [MEDIUM] CWE-20 CVE-2025-21284: Windows Virtual Trusted Platform Module Denial of Service Vulnerability Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2025-21280P4MEDIUMCVSS 5.5≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21280 [MEDIUM] CWE-20 CVE-2025-21280: Windows Virtual Trusted Platform Module Denial of Service Vulnerability Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2024-26220P4MEDIUMCVSS 5.0≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-26220 [MEDIUM] CWE-908 CVE-2024-26220: Windows Mobile Hotspot Information Disclosure Vulnerability Windows Mobile Hotspot Information Disclosure Vulnerability
nvd
CVE-2023-28276P4MEDIUMCVSS 4.4≥ 10.0.19043.0, < 10.0.19044.28462023-04-11
CVE-2023-28276 [MEDIUM] CVE-2023-28276: Windows Group Policy Security Feature Bypass Vulnerability Windows Group Policy Security Feature Bypass Vulnerability
nvd
CVE-2026-20936P4MEDIUMCVSS 4.3≥ 10.0.19044.0, < 10.0.19044.68092026-01-13
CVE-2026-20936 [MEDIUM] CWE-125 CVE-2026-20936: Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a phys Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2025-49760P4LOWCVSS 3.5≥ 10.0.19044.0, < 10.0.19044.60932025-07-08
CVE-2025-49760 [LOW] CWE-73 CVE-2025-49760: External control of file name or path in Windows Storage allows an authorized attacker to perform sp External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2023-24862P4MEDIUMCVSS 5.5≥ 10.0.19043.0, < 10.0.19044.27282023-03-14
CVE-2023-24862 [MEDIUM] CWE-125 CVE-2023-24862: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2024-35270P4MEDIUMCVSS 5.3≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-35270 [MEDIUM] CWE-400 CVE-2024-35270: Windows iSCSI Service Denial of Service Vulnerability Windows iSCSI Service Denial of Service Vulnerability
nvd
CVE-2023-32019P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.30862023-06-14
CVE-2023-32019 [MEDIUM] CWE-668 CVE-2023-32019: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2022-37981P4MEDIUMCVSS 4.3≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-37981 [MEDIUM] CVE-2022-37981: Windows Event Logging Service Denial of Service Vulnerability Windows Event Logging Service Denial of Service Vulnerability
nvd
CVE-2022-34704P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.18892022-08-09
CVE-2022-34704 [MEDIUM] CWE-203 CVE-2022-34704: Windows Defender Credential Guard Information Disclosure Vulnerability Windows Defender Credential Guard Information Disclosure Vulnerability
nvd
CVE-2023-21766P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21766 [MEDIUM] CWE-591 CVE-2023-21766: Windows Overlay Filter Information Disclosure Vulnerability Windows Overlay Filter Information Disclosure Vulnerability
nvd
CVE-2022-21845P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.18262022-07-12
CVE-2022-21845 [MEDIUM] CVE-2022-21845: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2022-30212P4MEDIUMCVSS 4.7≥ 10.0.19043.0, < 10.0.19044.18262022-07-12
CVE-2022-30212 [MEDIUM] CWE-362 CVE-2022-30212: Windows Connected Devices Platform Service Information Disclosure Vulnerability Windows Connected Devices Platform Service Information Disclosure Vulnerability
nvd
← Previous171 / 182Next →
Microsoft Windows 10 Version 21H2 vulnerabilities | cvebase