Microsoft Windows 10 21H2 vulnerabilities, page 4
3,383 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 21H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96923microsoftwindows_10_1607+28
EPSS score0.25%
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.CVE-2026-96921microsoftwindows_10_1607+28EPSS score0.39%
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.CVE-2026-96920microsoftwindows_10_1607+24EPSS score0.31%
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.CVE-2026-96919microsoftwindows_10_1809+17EPSS score0.15%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-96918microsoftwindows_10_1607+24EPSS score0.28%
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96917microsoftwindows_10_1809+20EPSS score0.31%
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.CVE-2026-96916microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96915microsoftwindows_10_1607+28EPSS score0.24%
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-96857microsoftwindows_10_1809+20EPSS score0.38%
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.CVE-2026-96856microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.CVE-2026-96855microsoftwindows_10_1809+20EPSS score0.28%
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.CVE-2026-96854microsoftwindows_10_1607+27EPSS score0.30%
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.CVE-2026-96853microsoftwindows_10_1607+28EPSS score0.18%
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-96852microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.CVE-2026-96851microsoftwindows_10_1607+28EPSS score0.39%
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.CVE-2026-96850microsoftwindows_10_1809+20EPSS score0.39%
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.CVE-2026-96848microsoftwindows_10_1809+12EPSS score0.39%
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-96847microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.CVE-2026-96846microsoftwindows_10_1607+28EPSS score0.30%
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.CVE-2026-96844microsoftwindows_10_1607+28EPSS score0.47%
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.