Skip to content

Vulnerabilities of Microsoft Windows 10 Version 21H2

Is your version affected?

CVE Summary Score Published
CVE-2026-77493 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-69819 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69431 Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69491 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code… 9.8 Critical Sep 8, 2026
CVE-2026-69276 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to… 9.8 Critical Sep 8, 2026
CVE-2026-57092 Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network 9.9 Critical Jul 14, 2026
CVE-2026-56188 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network… 9.8 Critical Jul 14, 2026
CVE-2026-56190 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability 9.8 Critical Jul 14, 2026
CVE-2026-50380 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network 9.6 Critical Jul 14, 2026
CVE-2026-49798 Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally 9.3 Critical Jul 14, 2026
CVE-2026-49172 Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-42990 Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-44815 Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-42904 Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent… 9.6 Critical Jun 9, 2026
CVE-2026-45602 No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network 9.1 Critical Jun 9, 2026
CVE-2026-47291 Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-33824 Exploited Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability 9.8 Critical Apr 14, 2026

Other Microsoft products