Microsoft Windows 10 21h2 vulnerabilities

CVE-2026-77894 High · 7.0 CWE-362 Sep 8, 2026

Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-77892 Medium · 6.8 CWE-693 Sep 8, 2026

Windows Boot Manager Elevation of Privilege Vulnerability

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-77504 High · 8.8 CWE-415 Sep 8, 2026

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77503 High · 7.8 CWE-125 Sep 8, 2026

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2026-77500 High · 7.8 CWE-763 Sep 8, 2026

Windows Device Association Service Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-77495 High · 8.8 CWE-122 Sep 8, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77493 Critical · 9.8 CWE-415 Sep 8, 2026

Windows Graphics Component Remote Code Execution Vulnerability

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77492 Medium · 5.5 CWE-125 Sep 8, 2026

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-77491 Medium · 5.5 CWE-125 Sep 8, 2026

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

CVE-2026-77489 High · 7.8 CWE-476 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73026 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73024 High · 7.8 CWE-122 Sep 8, 2026

Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-73023 High · 8.8 CWE-122 Sep 8, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73022 High · 7.0 CWE-416 Sep 8, 2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-73021 High · 7.8 CWE-20 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73020 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73019 Medium · 4.3 CWE-41 Sep 8, 2026

Windows URL Moniker Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-73018 High · 8.8 CWE-122 Sep 8, 2026

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-73017 High · 7.5 CWE-122 Sep 8, 2026

Graphics Kernel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2026-73016 High · 8.8 CWE-122 Sep 8, 2026

DirectWrite Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73015 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73014 High · 7.8 CWE-862 Sep 8, 2026

Data Sharing Service Client Elevation of Privilege Vulnerability

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-73013 High · 8.8 CWE-122 Sep 8, 2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73012 High · 8.8 CWE-122 Sep 8, 2026

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-73011 High · 7.8 CWE-122 Sep 8, 2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.