Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 21H2

Is your version affected?

CVE Summary Score Published
CVE-2026-61921 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network 6.5 Medium Aug 11, 2026
CVE-2026-61926 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61360 Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-61358 Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe)… 7.8 High Aug 11, 2026
CVE-2026-61364 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61365 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61355 Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61363 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 7.5 High Aug 11, 2026
CVE-2026-59131 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally 5.6 Medium Aug 11, 2026
CVE-2026-61349 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-59125 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-59126 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging… 7.0 High Aug 11, 2026
CVE-2026-59122 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service… 7.0 High Aug 11, 2026
CVE-2026-42976 Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges… 7.8 High Aug 11, 2026
CVE-2026-70347 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-70345 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-70346 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-70344 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61352 Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client… 7.5 High Aug 11, 2026
CVE-2026-70330 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Medium Aug 11, 2026
CVE-2026-70304 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally 6.7 Medium Aug 11, 2026
CVE-2026-70307 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Aug 11, 2026
CVE-2026-68820 Exploited Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 7.0 High Aug 11, 2026
CVE-2026-66799 Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-65814 Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026

Other Microsoft products