Microsoft Windows 10 Version 21H2 vulnerabilities
2,906 known vulnerabilities affecting microsoft/windows_10_version_21h2.
Total CVEs
2,906
CISA KEV
95
actively exploited
Public exploits
67
Exploited in wild
123
Severity breakdown
CRITICAL79HIGH2093MEDIUM721LOW13
Vulnerabilities
Page 67 of 146
CVE-2024-38239P3HIGHCVSS 7.2≥ 10.0.19043.0, < 10.0.19044.48942024-09-10
CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2026-50673P3HIGHCVSS 7.8≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50673 [HIGH] CWE-367 CVE-2026-50673: Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges local
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28232P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.28462023-04-11
CVE-2023-28232 [HIGH] CWE-362 CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-26234MEDIUMCVSS 6.7Exploited≥ 10.0.19043.0, < 10.0.19044.42912024-04-09
CVE-2024-26234 [MEDIUM] CWE-284 Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
cvelistv5
CVE-2026-40378P3HIGHCVSS 7.5≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-40378 [HIGH] CWE-789 CVE-2026-40378: Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (L
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-38198P3HIGHCVSS 7.5≥ 10.0.19043.0, < 10.0.19044.47802024-08-13
CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2025-62213P3HIGHCVSS 7.0≥ 10.0.19044.0, < 10.0.19044.65752025-11-11
CVE-2025-62213 [HIGH] CWE-416 CVE-2025-62213: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21235P3HIGHCVSS 7.3≥ 10.0.19044.0, < 10.0.19044.69372026-02-10
CVE-2026-21235 [HIGH] CWE-416 CVE-2026-21235: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54911P3HIGHCVSS 7.3≥ 10.0.19044.0, < 10.0.19044.63322025-09-09
CVE-2025-54911 [HIGH] CWE-416 CVE-2025-54911: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50364P3HIGHCVSS 7.3≥ 10.0.19044.0, < 10.0.19044.75482026-07-14
CVE-2026-50364 [HIGH] CWE-59 CVE-2026-50364: Improper link resolution before file access ('link following') in Windows Server Backup allows an au
Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32149P3HIGHCVSS 7.3≥ 10.0.19044.0, < 10.0.19044.71842026-04-14
CVE-2026-32149 [HIGH] CWE-20 CVE-2026-32149: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2024-20666MEDIUMCVSS 6.6Exploited≥ 10.0.19043.0, < 10.0.19044.39302024-01-09
CVE-2024-20666 [MEDIUM] CWE-20 BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
cvelistv5
CVE-2026-20812P3MEDIUMCVSS 6.5≥ 10.0.19044.0, < 10.0.19044.68092026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2022-26926P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19043.17062022-05-10
CVE-2022-26926 [HIGH] CWE-284 CVE-2022-26926: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2022-21888P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.14662022-01-11
CVE-2022-21888 [HIGH] CVE-2022-21888: Windows Modern Execution Server Remote Code Execution Vulnerability
Windows Modern Execution Server Remote Code Execution Vulnerability
nvd
CVE-2022-26903P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19043.16452022-04-15
CVE-2022-26903 [HIGH] CVE-2022-26903: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-30206P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.18262022-07-12
CVE-2022-30206 [HIGH] CVE-2022-30206: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-43234P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19044.14152021-12-15
CVE-2021-43234 [HIGH] CVE-2021-43234: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-37955P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.20062022-09-13
CVE-2022-37955 [HIGH] CVE-2022-37955: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-24494P3HIGHCVSS 7.8≥ 10.0.19043.0, < 10.0.19044.16452022-04-15
CVE-2022-24494 [HIGH] CVE-2022-24494: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd