Microsoft Windows 10 Version 21H2 vulnerabilities
3,631 known vulnerabilities affecting microsoft/windows_10_version_21h2.
Total CVEs
3,631
CISA KEV
98
actively exploited
Public exploits
68
Exploited in wild
126
Severity breakdown
CRITICAL104HIGH2642MEDIUM872LOW13
Vulnerabilities
Page 173 of 182
CVE-2025-59280P4LOWCVSS 3.1≥ 10.0.19044.0, < 10.0.19044.64562025-10-14
CVE-2025-59280 [LOW] CWE-287 CVE-2025-59280: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering o
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2025-21210P4MEDIUMCVSS 4.2≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21210 [MEDIUM] CWE-636 CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability
Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2022-38022P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-38022 [LOW] CVE-2022-38022: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-41076HIGHCVSS 8.5≥ 10.0.19044.0, < 10.0.19044.23642022-12-13
CVE-2022-41076 [HIGH] PowerShell Remote Code Execution Vulnerability
PowerShell Remote Code Execution Vulnerability
PowerShell Remote Code Execution Vulnerability
cvelistv5
CVE-2023-21759P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21759 [LOW] CVE-2023-21759: Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
nvd
CVE-2026-50419P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50419 [LOW] CWE-200 CVE-2026-50419: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-57085P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2025-55695P4LOWCVSS 3.3≥ 10.0.19044.0, < 10.0.19044.64562025-10-14
CVE-2025-55695 [LOW] CWE-125 CVE-2025-55695: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose inf
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
nvd
CVE-2022-21977P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19043.15862022-03-09
CVE-2022-21977 [LOW] CVE-2022-21977: Media Foundation Information Disclosure Vulnerability
Media Foundation Information Disclosure Vulnerability
nvd
CVE-2024-38030MEDIUMCVSS 6.5≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-38030 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
cvelistv5
CVE-2024-26217P4LOWCVSS 3.3≥ 10.0.19043.0, < 10.0.19044.44122024-04-09
CVE-2024-26217 [LOW] CWE-125 CVE-2024-26217: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-26414MEDIUMCVSS 4.8≥ 10.0.0, < 10.0.19044.27282021-06-08
CVE-2021-26414 [MEDIUM] Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
cvelistv5
CVE-2022-34689HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.18892022-10-11
CVE-2022-34689 [HIGH] Windows CryptoAPI Spoofing Vulnerability
Windows CryptoAPI Spoofing Vulnerability
Windows CryptoAPI Spoofing Vulnerability
cvelistv5
CVE-2025-21377MEDIUMCVSS 6.5≥ 10.0.19044.0, < 10.0.19044.54872025-02-11
CVE-2025-21377 [MEDIUM] CWE-73 NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
cvelistv5
CVE-2024-30081HIGHCVSS 7.1≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-30081 [HIGH] CWE-200 Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
cvelistv5
CVE-2025-21312P4LOWCVSS 2.4≥ 10.0.19044.0, < 10.0.19044.53712025-01-14
CVE-2025-21312 [LOW] CWE-908 CVE-2025-21312: Windows Smart Card Reader Information Disclosure Vulnerability
Windows Smart Card Reader Information Disclosure Vulnerability
nvd
CVE-2023-41772HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-41772 [HIGH] CWE-284 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-34729HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.20062022-09-13
CVE-2022-34729 [HIGH] Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-30087HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.45292024-06-11
CVE-2024-30087 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-36731HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36731 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5