cbcvebase.

Microsoft Windows 10 Version 21H2 vulnerabilities

2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs
2,906
CISA KEV
95
actively exploited
Public exploits
67
Exploited in wild
123
Severity breakdown
CRITICAL79HIGH2093MEDIUM721LOW13

Vulnerabilities

Page 5 of 146
CVE-2025-21418P1HIGHCVSS 7.8KEV≥ 10.0.19044.0, < 10.0.19044.54872025-02-11
CVE-2025-21418 [HIGH] CWE-122 CVE-2025-21418: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2026-21525P1MEDIUMCVSS 6.2KEV≥ 10.0.19044.0, < 10.0.19044.69372026-02-10
CVE-2026-21525 [MEDIUM] CWE-476 CVE-2026-21525: Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
nvd
CVE-2024-38217P2MEDIUMCVSS 5.4KEV≥ 10.0.19043.0, < 10.0.19044.48942024-09-10
CVE-2024-38217 [MEDIUM] CWE-693 CVE-2024-38217: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2023-36584P2MEDIUMCVSS 5.4KEV≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36584 [MEDIUM] CVE-2023-36584: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2022-41049P2MEDIUMCVSS 5.4KEV≥ 10.0.19043.0, < 10.0.19044.22512022-11-09
CVE-2022-41049 [MEDIUM] CVE-2022-41049: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2023-36563P2MEDIUMCVSS 5.5KEV≥ 10.0.19043.0, < 10.0.19041.35702023-10-10
CVE-2023-36563 [MEDIUM] CWE-20 CVE-2023-36563: Microsoft WordPad Information Disclosure Vulnerability Microsoft WordPad Information Disclosure Vulnerability
nvd
CVE-2025-24991P2MEDIUMCVSS 5.5KEV≥ 10.0.19044.0, < 10.0.19044.56082025-03-11
CVE-2025-24991 [MEDIUM] CWE-125 CVE-2025-24991: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2025-24984P2MEDIUMCVSS 4.6KEV≥ 10.0.19044.0, < 10.0.19044.56082025-03-11
CVE-2025-24984 [MEDIUM] CWE-532 CVE-2025-24984: Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2022-21907P1CRITICALCVSS 9.8ExploitedPoC≥ 10.0.19043.0, < 10.0.19044.14662022-01-11
CVE-2022-21907 [CRITICAL] CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability HTTP Protocol Stack Remote Code Execution Vulnerability
nvd
CVE-2022-26809P1CRITICALCVSS 9.8ExploitedPoCRansomware≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-26809 [CRITICAL] CVE-2022-26809: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-34721P1CRITICALCVSS 9.8ExploitedPoC≥ 10.0.19043.0, < 10.0.19044.20062022-09-13
CVE-2022-34721 [CRITICAL] CVE-2022-34721: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2024-43451MEDIUMCVSS 6.5KEVPoCRansomware≥ 10.0.19043.0, < 10.0.19044.51312024-11-12
CVE-2024-43451 [MEDIUM] CWE-73 NTLM Hash Disclosure Spoofing Vulnerability NTLM Hash Disclosure Spoofing Vulnerability NTLM Hash Disclosure Spoofing Vulnerability
cvelistv5
CVE-2022-21882HIGHCVSS 7.0KEVPoC≥ 10.0.19043.0, < 10.0.19044.14662022-01-11
CVE-2022-21882 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2025-24071P1MEDIUMCVSS 6.5ExploitedPoC≥ 10.0.19044.0, < 10.0.19044.56082025-03-11
CVE-2025-24071 [MEDIUM] CWE-200 CVE-2025-24071: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-30090P1HIGHCVSS 7.0ExploitedPoCRansomware≥ 10.0.19044.0, < 10.0.19044.45292024-06-11
CVE-2024-30090 [HIGH] CWE-822 CVE-2024-30090: Microsoft Streaming Service Elevation of Privilege Vulnerability Microsoft Streaming Service Elevation of Privilege Vulnerability
nvd
CVE-2022-24481P2HIGHCVSS 7.8ExploitedPoC≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-24481 [HIGH] CVE-2022-24481: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-26229P1HIGHCVSS 7.8ExploitedPoC≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-26229 [HIGH] CWE-122 CVE-2024-26229: Windows CSC Service Elevation of Privilege Vulnerability Windows CSC Service Elevation of Privilege Vulnerability
nvd
CVE-2024-38112HIGHCVSS 7.5KEV≥ 10.0.19043.0, < 10.0.19044.46512024-07-09
CVE-2024-38112 [HIGH] CWE-451 Windows MSHTML Platform Spoofing Vulnerability Windows MSHTML Platform Spoofing Vulnerability Windows MSHTML Platform Spoofing Vulnerability
cvelistv5
CVE-2024-43461HIGHCVSS 8.8KEV≥ 10.0.19043.0, < 10.0.19044.48942024-09-10
CVE-2024-43461 [HIGH] CWE-451 Windows MSHTML Platform Spoofing Vulnerability Windows MSHTML Platform Spoofing Vulnerability Windows MSHTML Platform Spoofing Vulnerability
cvelistv5
CVE-2024-38178HIGHCVSS 7.5KEV≥ 10.0.19043.0, < 10.0.19044.47802024-08-13
CVE-2024-38178 [HIGH] CWE-843 Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability
cvelistv5
← Previous5 / 146Next →
Microsoft Windows 10 Version 21H2 vulnerabilities | cvebase