← Back

Windows 10 21h2

windows_10_21h2

Vendor: Microsoft • 2,022 CVEs

CVEs (2,022)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 1809
Windows 10 21h2Windows 10 22h2+5 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 22h2+5 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 1809
Windows 10 21h2Windows 10 22h2+5 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 22h2+5 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 3, 2025
Apr 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.