Known vulnerabilities in Microsoft Windows 10 Version 21H2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-47984 | Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network | 7.5 High | Jul 8, 2025 |
| CVE-2025-47976 | Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally | 7.8 High | Jul 8, 2025 |
| CVE-2025-47972 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method… | 8.0 High | Jul 8, 2025 |
| CVE-2025-47971 | Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally | 7.8 High | Jul 8, 2025 |
| CVE-2025-47159 | Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… | 7.8 High | Jul 8, 2025 |
| CVE-2025-33073 | Exploited Microsoft Windows SMB Client Improper Access Control Vulnerability | 8.8 High | Jun 10, 2025 |
| CVE-2025-33070 | Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network | 8.1 High | Jun 10, 2025 |
| CVE-2025-33057 | Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over… | 6.5 Medium | Jun 10, 2025 |
| CVE-2025-33056 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny… | 7.5 High | Jun 10, 2025 |
| CVE-2025-33055 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33053 | Exploited Microsoft Windows External Control of File Name or Path Vulnerability | 8.8 High | Jun 10, 2025 |
| CVE-2025-33052 | Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-24065 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-24069 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-24068 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-47955 | Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate… | 7.8 High | Jun 10, 2025 |
| CVE-2025-47160 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a… | 5.4 Medium | Jun 10, 2025 |
| CVE-2025-33067 | Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally | 8.4 High | Jun 10, 2025 |
| CVE-2025-33075 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to… | 7.8 High | Jun 10, 2025 |
| CVE-2025-33066 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… | 8.8 High | Jun 10, 2025 |
| CVE-2025-33064 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… | 8.8 High | Jun 10, 2025 |
| CVE-2025-33065 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33063 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33062 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33061 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
Other Microsoft products
Windows Server 2019 5745
Windows Server 2019 (Server Core installation) 5648
Windows 10 Version 1809 5349
Windows Server 2022 5112
Windows Server 2016 5051
Windows Server 2016 (Server Core installation) 4847
Windows 10 Version 1607 4535
Windows Server 2012 R2 4103
Windows 10 Version 22H2 4041
Windows Server 2012 R2 (Server Core installation) 3958
Windows Server 2012 3865
Windows Server 2012 (Server Core installation) 3732