Microsoft Windows 10 21h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 10 21h2: 2062 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_10_21h2
CVE-2026-69761
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69760
High · 7.5
CWE-125 Sep 8, 2026
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69758
High · 7.8
CWE-122 Sep 8, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69757
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69741
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69738
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69735
High · 7.0
CWE-416 Sep 8, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69732
High · 8.1
CWE-122 Sep 8, 2026
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-69731
High · 7.8
CWE-122 Sep 8, 2026
HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69727
High · 8.0
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69725
High · 7.8
CWE-415 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69723
Medium · 5.7
CWE-497 Sep 8, 2026
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
CVE-2026-69717
High · 8.8
CWE-125 Sep 8, 2026
Windows Group Policy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVE-2026-69715
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Direct Show Remote Code Execution Vulnerability
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVE-2026-69714
High · 8.8
CWE-121 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69713
Medium · 4.4
CWE-1395 Sep 8, 2026
Windows Secure Boot Security Feature Bypass Vulnerability
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-69711
High · 7.0
CWE-416 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69710
High · 7.5
CWE-362 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69709
High · 7.8
CWE-122 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69708
High · 7.0
CWE-416 Sep 8, 2026
Windows Web Platform Storage Elevation of Privilege Vulnerability
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69707
High · 7.8
CWE-190 Sep 8, 2026
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69706
High · 7.5
CWE-416 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69694
High · 7.0
CWE-502 Sep 8, 2026
Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69693
High · 7.0
CWE-416 Sep 8, 2026
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVE-2026-69692
High · 7.0
CWE-416 Sep 8, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.