cbcvebase.

Microsoft Windows 10 Version 21H2 vulnerabilities

3,631 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs
3,631
CISA KEV
98
actively exploited
Public exploits
68
Exploited in wild
126
Severity breakdown
CRITICAL104HIGH2641MEDIUM873LOW13

Vulnerabilities

Page 44 of 182
CVE-2024-38244P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.48942024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-24533P3HIGHCVSS 8.0≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-24533 [HIGH] CVE-2022-24533: Remote Desktop Protocol Remote Code Execution Vulnerability Remote Desktop Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21819P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.26042023-02-14
CVE-2023-21819 [HIGH] CWE-125 CVE-2023-21819: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2025-26634P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.54872025-03-11
CVE-2025-26634 [HIGH] CWE-122 CVE-2025-26634: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-28227P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.28462023-04-11
CVE-2023-28227 [HIGH] CWE-122 CVE-2023-28227: Windows Bluetooth Driver Remote Code Execution Vulnerability Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2026-69553P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.77252026-09-08
CVE-2026-69553 [HIGH] CWE-862 CVE-2026-69553: Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-36594P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36594 [HIGH] CWE-843 CVE-2023-36594: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-37975P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.21302022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2023-28275P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.28462023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21549P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21549 [HIGH] CWE-285 CVE-2023-21549: Windows SMB Witness Service Elevation of Privilege Vulnerability Windows SMB Witness Service Elevation of Privilege Vulnerability
nvd
CVE-2023-21732P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21732 [HIGH] CWE-121 CVE-2023-21732: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21681P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.24862023-01-10
CVE-2023-21681 [HIGH] CWE-191 CVE-2023-21681: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-29372P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.30862023-06-14
CVE-2023-29372 [HIGH] CWE-122 CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21797P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.26042023-02-14
CVE-2023-21797 [HIGH] CWE-190 CVE-2023-21797: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-21798P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.26042023-02-14
CVE-2023-21798 [HIGH] CWE-125 CVE-2023-21798: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-22038P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.18262022-07-12
CVE-2022-22038 [HIGH] CVE-2022-22038: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-35315P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.32082023-07-11
CVE-2023-35315 [HIGH] CWE-190 CVE-2023-35315: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2025-59512P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.65752025-11-11
CVE-2025-59512 [HIGH] CWE-284 CVE-2025-59512: Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attac Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-20652P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.39302024-01-09
CVE-2024-20652 [HIGH] CWE-73 CVE-2024-20652: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2022-34714P3HIGHCVSS 8.1≥ 10.0.19043.0, < 10.0.19044.18892022-08-09
CVE-2022-34714 [HIGH] CWE-94 CVE-2022-34714: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
← Previous44 / 182Next →
Microsoft Windows 10 Version 21H2 vulnerabilities | cvebase