Microsoft Windows 10 Version 21H2 vulnerabilities

2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs

2,906

CISA KEV

actively exploited

Public exploits

Exploited in wild

123

Severity breakdown

CRITICAL79HIGH2093MEDIUM721LOW13

Vulnerabilities

SortPage 41 of 146

CVE-2022-24495P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.16452022-04-15

CVE-2022-24495 [HIGH] CVE-2022-24495: Windows Direct Show Remote Code Execution Vulnerability Windows Direct Show Remote Code Execution Vulnerability

nvd

CVE-2024-30098P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.64562024-07-09

CVE-2024-30098 [HIGH] CWE-327 CVE-2024-30098: Windows Cryptographic Services Security Feature Bypass Vulnerability Windows Cryptographic Services Security Feature Bypass Vulnerability

nvd

CVE-2026-20810P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.68092026-01-13

CVE-2026-20810 [HIGH] CWE-590 CVE-2026-20810: Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-48574P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-48574 [HIGH] CWE-122 CVE-2026-48574: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

nvd

CVE-2022-30194P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.18892022-08-09

CVE-2022-30194 [HIGH] CWE-94 CVE-2022-30194: Windows WebBrowser Control Remote Code Execution Vulnerability Windows WebBrowser Control Remote Code Execution Vulnerability

nvd

CVE-2026-50313P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50313 [HIGH] CWE-122 CVE-2026-50313: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50347P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50347 [HIGH] CWE-122 CVE-2026-50347: Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-45636P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-45636 [HIGH] CWE-20 CVE-2026-45636: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-49796P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49796 [HIGH] CWE-122 CVE-2026-49796: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-62474P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.66912025-12-09

CVE-2025-62474 [HIGH] CWE-284 CVE-2025-62474: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49797P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49797 [HIGH] CWE-122 CVE-2026-49797: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-53789P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.60932025-08-12

CVE-2025-53789 [HIGH] CWE-306 CVE-2025-53789: Missing authentication for critical function in Windows StateRepository API allows an authorized att Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-35417P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.72912026-05-12

CVE-2026-35417 [HIGH] CWE-843 CVE-2026-35417: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50448P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50448 [HIGH] CWE-122 CVE-2026-50448: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50461P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50461 [HIGH] CWE-122 CVE-2026-50461: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50386P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50386 [HIGH] CWE-122 CVE-2026-50386: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-40399P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.72912026-05-12

CVE-2026-40399 [HIGH] CWE-121 CVE-2026-40399: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-34343P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.72912026-05-12

CVE-2026-34343 [HIGH] CWE-122 CVE-2026-34343: Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized at Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50478P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50478 [HIGH] CWE-416 CVE-2026-50478: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50326P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50326 [HIGH] CWE-416 CVE-2026-50326: Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.

nvd

← Previous41 / 146Next →