Microsoft Windows 10 Version 21H2 vulnerabilities

2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.

Total CVEs

2,906

CISA KEV

actively exploited

Public exploits

Exploited in wild

123

Severity breakdown

CRITICAL79HIGH2093MEDIUM721LOW13

Vulnerabilities

SortPage 58 of 146

CVE-2026-42837P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-42837 [HIGH] CWE-125 CVE-2026-42837: Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to e Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-42828P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-42828 [HIGH] CWE-126 CVE-2026-42828: Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to ele Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50647P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50647 [HIGH] CWE-835 CVE-2026-50647: Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-54115P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-54115 [HIGH] CWE-122 CVE-2026-54115: Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40409P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-45592P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.74172026-06-09

CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26153P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.71842026-04-14

CVE-2026-26153 [HIGH] CWE-125 CVE-2026-26153: Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49665P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.60932025-07-08

CVE-2025-49665 [HIGH] CWE-362 CVE-2025-49665: Concurrent execution using shared resource with improper synchronization ('race condition') in Works Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49733P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.60932025-07-08

CVE-2025-49733 [HIGH] CWE-416 CVE-2025-49733: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49725P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.60932025-07-08

CVE-2025-49725 [HIGH] CWE-416 CVE-2025-49725: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50335P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50335 [HIGH] CWE-284 CVE-2026-50335: Improper access control in Windows Operating Systems allows an authorized attacker to elevate privil Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-33834P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.72912026-05-12

CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54913P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.63322025-09-09

CVE-2025-54913 [HIGH] CWE-362 CVE-2025-54913: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50498P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50498 [HIGH] CWE-125 CVE-2026-50498: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-50491P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49790P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49790 [HIGH] CWE-122 CVE-2026-49790: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-49792P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49792 [HIGH] CWE-197 CVE-2026-49792: Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

nvd

CVE-2026-49783P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14

CVE-2026-49783 [HIGH] CWE-358 CVE-2026-49783: Improperly implemented security check for standard in Windows Secure Boot allows an authorized attac Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2025-58714P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.64562025-10-14

CVE-2025-58714 [HIGH] CWE-284 CVE-2025-58714: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-34338P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.72912026-05-12

CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

nvd

← Previous58 / 146Next →