cbcvebase.

Microsoft Windows 10 Version 21H2 vulnerabilities

2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs
2,906
CISA KEV
95
actively exploited
Public exploits
67
Exploited in wild
123
Severity breakdown
CRITICAL79HIGH2093MEDIUM721LOW13

Vulnerabilities

Page 39 of 146
CVE-2024-43623P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.51312024-11-12
CVE-2024-43623 [HIGH] CWE-190 CVE-2024-43623: Windows NT OS Kernel Elevation of Privilege Vulnerability Windows NT OS Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-26211P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.44122024-04-09
CVE-2024-26211 [HIGH] CWE-122 CVE-2024-26211: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-37975P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-37970P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-37970 [HIGH] CVE-2022-37970: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-24542P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-24542 [HIGH] CVE-2022-24542: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2024-49105P3HIGHCVSS 8.4≥ 10.0.19043.0, < 10.0.19044.52472024-12-12
CVE-2024-49105 [HIGH] CWE-284 CVE-2024-49105: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-49723P3HIGHCVSS 8.8≥ 10.0.19044.0, < 10.0.19044.60932025-07-08
CVE-2025-49723 [HIGH] CWE-862 CVE-2025-49723: Missing authorization in Windows StateRepository API allows an authorized attacker to perform tamper Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
nvd
CVE-2022-26826P3HIGHCVSS 7.2≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-26826 [HIGH] CWE-77 CVE-2022-26826: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-35767P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.18892022-08-09
CVE-2022-35767 [HIGH] CWE-94 CVE-2022-35767: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35766P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.18892022-08-09
CVE-2022-35766 [HIGH] CWE-94 CVE-2022-35766: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41081P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-38000P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-38000 [HIGH] CWE-362 CVE-2022-38000: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-22035P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-22035 [HIGH] CWE-362 CVE-2022-22035: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21546P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21546 [HIGH] CWE-591 CVE-2023-21546: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21679P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21679 [HIGH] CWE-416 CVE-2023-21679: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21555P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21555 [HIGH] CWE-367 CVE-2023-21555: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21548P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21548 [HIGH] CWE-591 CVE-2023-21548: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2023-21535P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21535 [HIGH] CWE-591 CVE-2023-21535: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-44676P3HIGHCVSS 8.1≥ 10.0.19044.0, < 10.0.19044.23642022-12-13
CVE-2022-44676 [HIGH] CWE-362 CVE-2022-44676: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41039P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.22512022-11-09
CVE-2022-41039 [HIGH] CWE-362 CVE-2022-41039: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
Microsoft Windows 10 Version 21H2 vulnerabilities | cvebase