Microsoft Windows 10 Version 21H2 vulnerabilities, page 5
4,537 vulnerabilities
Known vulnerabilities in Microsoft Windows 10 Version 21H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-96858microsoft · windows 10 version 21h2 +9 moreWindows Security Account Manager Tampering VulnerabilityMissing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.EPSS0.35%MediumCVE-2026-96857microsoft · windows_10_1809 +20 moreWindows Projected File System Information Disclosure VulnerabilityFiles or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.EPSS0.38%HighCVE-2026-96856microsoft · windows_10_1607 +28 moreWindows Management Instrumentation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.EPSS0.31%MediumCVE-2026-96855microsoft · windows_10_1809 +20 moreWindows Modern Device Management (MDM) Tampering VulnerabilityImproper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.EPSS0.28%MediumCVE-2026-96854microsoft · windows_10_1607 +27 moreWindows Device Association Service Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.EPSS0.30%MediumCVE-2026-96853microsoft · windows_10_1607 +28 moreWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.EPSS0.18%HighCVE-2026-96852microsoft · windows_10_1607 +28 moreWindows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.EPSS0.25%MediumCVE-2026-96851microsoft · windows_10_1607 +28 moreWindows Management Instrumentation Information Disclosure VulnerabilityBuffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.EPSS0.39%MediumCVE-2026-96850microsoft · windows_10_1809 +20 moreWindows Modern Device Management (MDM) Information Disclosure VulnerabilityUse of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.EPSS0.39%MediumCVE-2026-96848microsoft · windows_10_1809 +12 moreWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityBuffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.EPSS0.39%HighCVE-2026-96847microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityUntrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%MediumCVE-2026-96846microsoft · windows_10_1607 +28 moreWebDAV Information Disclosure VulnerabilityOut-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.EPSS0.30%HighCVE-2026-96844microsoft · windows_10_1607 +28 moreMicrosoft Bluetooth Driver Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.EPSS0.47%HighCVE-2026-96843microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%HighCVE-2026-96325microsoft · windows_10_1607 +28 moreWindows SMB Server Denial of Service VulnerabilityMissing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.EPSS0.82%HighCVE-2026-96324microsoft · windows_10_1607 +28 moreMicrosoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.EPSS0.31%HighCVE-2026-96323microsoft · windows_10_21h2 +16 moreWindows Update Elevation of Privilege VulnerabilityUse after free in Windows Update allows an authorized attacker to elevate privileges locally.EPSS0.25%HighCVE-2026-96322microsoft · windows_10_1607 +28 moreWindows Remote Desktop Protocol Elevation of Privilege VulnerabilityUse after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.EPSS0.20%MediumCVE-2026-96321microsoft · windows_10_21h2 +16 moreRemote Desktop Display Driver Information Disclosure VulnerabilityOut-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.EPSS0.39%HighCVE-2026-96319microsoft · windows_10_21h2 +16 moreWindows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.EPSS0.25%