Microsoft Windows 10 Version 21H2 vulnerabilities

2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs

2,906

CISA KEV

actively exploited

Public exploits

Exploited in wild

123

Severity breakdown

CRITICAL79HIGH2093MEDIUM721LOW13

Vulnerabilities

SortPage 47 of 146

CVE-2026-50306P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50306 [HIGH] CWE-190 CVE-2026-50306: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50689P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50689 [HIGH] CWE-362 CVE-2026-50689: Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges local Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2022-32230P3HIGHCVSS 7.5≥ 19042.1706, < 19042.1706≥ 19043.1706, < 19043.1706+1 more2022-06-14

CVE-2022-32230 [HIGH] CWE-476 CVE-2022-32230: Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in

nvd

CVE-2026-54129P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-54129 [HIGH] CWE-416 CVE-2026-54129: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50307P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50307 [HIGH] CWE-416 CVE-2026-50307: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-44806P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-44806 [HIGH] CWE-401 CVE-2026-44806: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-49788P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49788 [HIGH] CWE-770 CVE-2026-49788: Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

nvd

CVE-2025-27484P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.57372025-04-08

CVE-2025-27484 [HIGH] CWE-591 CVE-2025-27484: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

nvd

CVE-2026-50470P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-50415P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50415 [HIGH] CWE-200 CVE-2026-50415: Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized a Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2023-38144P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.34482023-09-12

CVE-2023-38144 [HIGH] CWE-126 CVE-2023-38144: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-21557P3CRITICALCVSS 9.1≥ 10.0.19043.0, < 10.0.19044.24862023-01-10

CVE-2023-21557 [CRITICAL] CWE-190 CVE-2023-21557: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

nvd

CVE-2024-38085P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.46512024-07-09

CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

nvd

CVE-2022-30220P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.18262022-07-12

CVE-2022-30220 [HIGH] CVE-2022-30220: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2022-21974P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.15262022-02-09

CVE-2022-21974 [HIGH] CVE-2022-21974: Roaming Security Rights Management Services Remote Code Execution Vulnerability Roaming Security Rights Management Services Remote Code Execution Vulnerability

nvd

CVE-2024-30032P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.44122024-05-14

CVE-2024-30032 [HIGH] CWE-416 CVE-2024-30032: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability

nvd

CVE-2024-20653P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.39302024-01-09

CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability Microsoft Common Log File System Elevation of Privilege Vulnerability

nvd

CVE-2023-38143P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.34482023-09-12

CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-23388P3HIGHCVSS 8.8≥ 10.0.19043.0, < 10.0.19044.27282023-03-14

CVE-2023-23388 [HIGH] CWE-681 CVE-2023-23388: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-35380P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.33242023-08-08

CVE-2023-35380 [HIGH] CWE-416 CVE-2023-35380: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

nvd

← Previous47 / 146Next →