Microsoft Windows 10 Version 21H2 vulnerabilities
3,631 known vulnerabilities affecting microsoft/windows_10_version_21h2.
Total CVEs
3,631
CISA KEV
98
actively exploited
Public exploits
68
Exploited in wild
126
Severity breakdown
CRITICAL104HIGH2641MEDIUM873LOW13
Vulnerabilities
Page 3 of 182
CVE-2024-43572P1HIGHCVSS 7.8KEV≥ 10.0.19043.0, < 10.0.19044.50112024-10-08
CVE-2024-43572 [HIGH] CWE-707 CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
nvd
CVE-2024-29988P1HIGHCVSS 8.8KEV≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-29988 [HIGH] CWE-693 CVE-2024-29988: SmartScreen Prompt Security Feature Bypass Vulnerability
SmartScreen Prompt Security Feature Bypass Vulnerability
nvd
CVE-2022-34713P1HIGHCVSS 7.8KEV≥ 10.0.19043.0, < 10.0.19044.18892022-08-09
CVE-2022-34713 [HIGH] CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
nvd
CVE-2023-24880P1MEDIUMCVSS 4.4KEVRansomware≥ 10.0.19043.0, < 10.0.19044.27282023-03-14
CVE-2023-24880 [MEDIUM] CWE-863 CVE-2023-24880: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2026-21510P1HIGHCVSS 8.8KEV≥ 10.0.19044.0, < 10.0.19044.69372026-02-10
CVE-2026-21510 [HIGH] CWE-693 CVE-2026-21510: Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security f
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2022-41128P1HIGHCVSS 8.8KEV≥ 10.0.19043.0, < 10.0.19044.22512022-11-09
CVE-2022-41128 [HIGH] CWE-787 CVE-2022-41128: Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
nvd
CVE-2026-21513P1HIGHCVSS 8.8KEV≥ 10.0.19044.0, < 10.0.19044.69372026-02-10
CVE-2026-21513 [HIGH] CWE-693 CVE-2026-21513: Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a securit
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36036P1HIGHCVSS 7.8KEVRansomware≥ 10.0.19043.0, < 10.0.19043.36932023-11-14
CVE-2023-36036 [HIGH] CWE-122 CVE-2023-36036: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-85880P1HIGHCVSS 7.8KEV≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-85880 [HIGH] CWE-122 CVE-2026-85880: Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33824P1CRITICALCVSS 9.8KEV≥ 10.0.19044.0, < 10.0.19044.71842026-04-14
CVE-2026-33824 [CRITICAL] CWE-415 CVE-2026-33824: Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-23376P1HIGHCVSS 7.8KEVRansomware≥ 10.0.19043.0, < 10.0.19044.26042023-02-14
CVE-2023-23376 [HIGH] CWE-122 CVE-2023-23376: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-21351P1HIGHCVSS 7.6KEV≥ 10.0.19043.0, < 10.0.19044.40462024-02-13
CVE-2024-21351 [HIGH] CWE-94 CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2024-26169P1HIGHCVSS 7.8KEVRansomware≥ 10.0.19043.0, < 10.0.19044.41702024-03-12
CVE-2024-26169 [HIGH] CWE-269 CVE-2024-26169: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2022-41073P1HIGHCVSS 7.8KEVRansomware≥ 10.0.19043.0, < 10.0.19044.22512022-11-09
CVE-2022-41073 [HIGH] CWE-787 CVE-2022-41073: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-22047P1HIGHCVSS 7.8KEV≥ 10.0.19043.0, < 10.0.19044.18262022-07-12
CVE-2022-22047 [HIGH] CWE-426 CVE-2022-22047: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-22718P1HIGHCVSS 7.8KEV≥ 10.0.19043.0, < 10.0.19044.15262022-02-09
CVE-2022-22718 [HIGH] CVE-2022-22718: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2024-30040P1HIGHCVSS 8.8KEV≥ 10.0.19043.0, < 10.0.19044.44122024-05-14
CVE-2024-30040 [HIGH] CWE-20 CVE-2024-30040: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2026-68820P1HIGHCVSS 7.0KEV≥ 10.0.19044.0, < 10.0.19044.76632026-08-11
CVE-2026-68820 [HIGH] CWE-416 CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21533P1HIGHCVSS 7.8KEV≥ 10.0.19044.0, < 10.0.19044.69372026-02-10
CVE-2026-21533 [HIGH] CWE-269 CVE-2026-21533: Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate pri
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62221P1HIGHCVSS 7.8KEV≥ 10.0.19044.0, < 10.0.19044.66912025-12-09
CVE-2025-62221 [HIGH] CWE-416 CVE-2025-62221: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd