Windows 10 Version 21H2 vulnerabilities
393 known vulnerabilities in Windows 10 Version 21H2 from Microsoft. 373 are rated high or critical, and 99 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Microsoft Windows MSHTML Platform Privilege Escalation Exploited
Windows MSHTML Platform Elevation of Privilege Vulnerability
- 8.4 High severity
Microsoft Streaming Service Untrusted Pointer Dereference Exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 4.4 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Graphic Component Privilege Escalation Exploited
Windows Graphics Component Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Exploited
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Defender SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft Windows Scripting Languages Remote Code Execution Exploited
Windows Scripting Languages Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows COM+ Event System Service Privilege Escalation Exploited
Windows COM+ Event System Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- 7.2 High severity
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Exploited
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- 7.5 High severity
Windows 10 Version 20H2: NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD)
- 7.8 High severity
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The
- 5.9 Medium severity
Microsoft Windows LSA Spoofing Exploited
Windows LSA Spoofing Vulnerability
- 9.0 High severity
Microsoft Active Directory Domain Services Privilege Escalation Exploited
Active Directory Domain Services Elevation of Privilege Vulnerability
- 4.4 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows CLFS Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.2 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 9.3 High severity
Microsoft Windows Runtime Remote Code Execution Exploited
Windows Runtime Remote Code Execution Vulnerability
- 6.9 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Win32k Privilege Escalation Exploited
Win32k Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Print Spooler Remote Code Execution Exploited
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the
- 8.8 High severity
Microsoft WinVerifyTrust function Remote Code Execution Exploited
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo