Windows 10 Version 21H2 vulnerabilities

393 known vulnerabilities in Windows 10 Version 21H2 from Microsoft. 373 are rated high or critical, and 99 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Windows 10 Version 1607: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2026-71330Sep 8, 2026MicrosoftEPSS 1.03%

  Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

• 7.8 High severity

  Windows 10 Version 1607: Improper Handling of Insufficient Permissions or Privileges

  CVE-2026-69907Sep 8, 2026Microsoft

  Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Integer Underflow (Wrap or Wraparound)

  CVE-2026-69859Sep 8, 2026Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69799Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69710Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Neutralization of Special Elements used in a Command

  CVE-2026-69534Sep 8, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

• 7.1 High severity

  Windows 10 Version 1607: Creation of Temporary File in Directory with Insecure Permissions

  CVE-2026-69482Sep 8, 2026Microsoft

  Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69448Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-69445Sep 8, 2026Microsoft

  Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69441Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69404Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69398Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69385Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

• 7.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69364Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

• 7.8 High severity

  Windows 10 Version 1607: Out-of-bounds Read

  CVE-2026-69324Sep 8, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-69319Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-69289Sep 8, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-68840Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-68824Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50349Sep 8, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62727Aug 19, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Exploited

  CVE-2026-68820Aug 11, 2026MicrosoftEPSS 8.57%

  Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62908Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 21H2: Improper Link Resolution Before File Access

  CVE-2026-62832Aug 11, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62748Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62734Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62729Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Out-of-bounds Read

  CVE-2026-62728Aug 11, 2026Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Integer Underflow (Wrap or Wraparound)

  CVE-2026-62696Aug 11, 2026Microsoft

  Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62690Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-61932Aug 11, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Improper Link Resolution Before File Access

  CVE-2026-61358Aug 11, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-61352Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-59126Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-59122Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Improper Neutralization of Special Elements used in a Command

  CVE-2026-49179Aug 11, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58598Jul 16, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58628Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58531Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-56649Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.