Microsoft Windows 10 21h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 10 21h2: 2107 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_10_21h2
CVE-2026-69471
High · 7.8
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69452
High · 7.1
CWE-416 Oct 13, 2026
Windows Enterprise App Management Elevation of Privilege Vulnerability
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVE-2026-69387
High · 7.0
CWE-416 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69363
High · 8.0
CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-69354
High · 7.8
CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69326
High · 8.8
CWE-122 Oct 13, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-68836
High · 7.8
CWE-122 Oct 13, 2026
Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
CVE-2026-62879
Medium · 5.5
CWE-306 Oct 13, 2026
Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
CVE-2026-62687
Medium · 5.5
CWE-59 Oct 13, 2026
Windows Backup Engine Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
CVE-2026-61931
High · 7.8
CWE-416 Oct 13, 2026
Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59116
Medium · 6.8
CWE-327 Oct 13, 2026
Windows Remote Desktop Security Feature Bypass Vulnerability
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-108396
High · 7.0
CWE-367 Oct 13, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-108136
High · 7.8
CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-108135
High · 7.0
CWE-59 Oct 13, 2026
Windows Backup Engine Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-108132
High · 7.0
CWE-415 Oct 13, 2026
Windows Kerberos Elevation of Privilege Vulnerability
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-108129
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108128
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108127
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-105723
Critical · 9.8
CWE-822 Oct 13, 2026
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105722
High · 7.0
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-105010
Critical · 9.8
CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105004
High · 7.8
CWE-125 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-103569
High · 7.5
CWE-125 Oct 13, 2026
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
CVE-2026-103568
High · 7.8
CWE-122 Oct 13, 2026
Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-103567
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.