Windows 10 21h1 (Microsoft) - vulnerabilities (CVEs)

83 CVEs, 0 in the last 30 days, 235 known versions, newest CVE from 2024-09-10. Vendor: Microsoft.

CVEs of Windows 10 21h1

• CVE-2024-38257 - CVSS 7.5 (high), 2024-09-10: Microsoft AllJoyn API Information Disclosure Vulnerability
• CVE-2024-38256 - CVSS 5.5 (medium), 2024-09-10: Windows Kernel-Mode Driver Information Disclosure Vulnerability
• CVE-2024-38254 - CVSS 6.2 (medium), 2024-09-10: Windows Authentication Information Disclosure Vulnerability
• CVE-2024-38252 - CVSS 7.8 (high), 2024-09-10: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2024-38250 - CVSS 7.8 (high), 2024-09-10: Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-38119 - CVSS 7.5 (high), 2024-09-10: Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
• CVE-2024-38046 - CVSS 7.8 (high), 2024-09-10: PowerShell Elevation of Privilege Vulnerability
• CVE-2024-30080 - CVSS 9.8 (critical), 2024-06-11: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2024-21420 - CVSS 8.8 (high), 2024-02-13: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
• CVE-2024-21357 - CVSS 8.1 (high), 2024-02-13: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2022-44684 - CVSS 6.5 (medium), 2023-12-20: Windows Local Session Manager (LSM) Denial of Service Vulnerability
• CVE-2023-36584 - CVSS 5.4 (medium), 2023-10-10: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2023-36596 - CVSS 7.5 (high), 2023-10-10: Remote Procedure Call Information Disclosure Vulnerability
• CVE-2023-36594 - CVSS 7.8 (high), 2023-10-10: Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2023-36602 - CVSS 7.5 (high), 2023-10-10: Windows TCP/IP Denial of Service Vulnerability
• CVE-2023-36585 - CVSS 7.5 (high), 2023-10-10: Windows upnphost.dll Denial of Service Vulnerability
• CVE-2023-36598 - CVSS 7.8 (high), 2023-10-10: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
• CVE-2023-36567 - CVSS 7.5 (high), 2023-10-10: Windows Deployment Services Information Disclosure Vulnerability
• CVE-2023-36577 - CVSS 8.8 (high), 2023-10-10: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
• CVE-2023-36576 - CVSS 5.5 (medium), 2023-10-10: Windows Kernel Information Disclosure Vulnerability
• CVE-2023-36436 - CVSS 7.8 (high), 2023-10-10: Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2022-35758 - CVSS 5.5 (medium), 2023-05-31: Windows Kernel Memory Information Disclosure Vulnerability
• CVE-2022-35757 - CVSS 7.3 (high), 2023-05-31: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2022-35756 - CVSS 7.8 (high), 2023-05-31: Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2022-35759 - CVSS 6.5 (medium), 2023-05-31: Windows Local Security Authority (LSA) Denial of Service Vulnerability
• CVE-2022-35755 - CVSS 7.3 (high), 2023-05-31: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-35743 - CVSS 7.8 (high), 2023-05-31: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-35746 - CVSS 7.8 (high), 2023-05-31: Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35750 - CVSS 7.8 (high), 2023-05-31: Win32k Elevation of Privilege Vulnerability
• CVE-2022-35754 - CVSS 6.7 (medium), 2023-05-31: Unified Write Filter Elevation of Privilege Vulnerability
• CVE-2022-35745 - CVSS 8.1 (high), 2023-05-31: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2022-35749 - CVSS 7.8 (high), 2023-05-31: Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35753 - CVSS 8.1 (high), 2023-05-31: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2022-35744 - CVSS 9.8 (critical), 2023-05-31: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
• CVE-2022-35747 - CVSS 5.9 (medium), 2023-05-31: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
• CVE-2022-35752 - CVSS 8.1 (high), 2023-05-31: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2023-21712 - CVSS 8.1 (high), 2023-04-27: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2022-44698 - CVSS 5.4 (medium), 2022-12-13: Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2022-41094 - CVSS 7.8 (high), 2022-12-13: Windows Hyper-V Elevation of Privilege Vulnerability
• CVE-2022-41128 - CVSS 8.8 (high), 2022-11-09: Windows Scripting Languages Remote Code Execution Vulnerability
• CVE-2022-41125 - CVSS 7.8 (high), 2022-11-09: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
• CVE-2022-41091 - CVSS 5.4 (medium), 2022-11-09: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2022-41073 - CVSS 7.8 (high), 2022-11-09: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-41049 - CVSS 5.4 (medium), 2022-11-09: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2022-41033 - CVSS 7.8 (high), 2022-10-11: Windows COM+ Event System Service Elevation of Privilege Vulnerability
• CVE-2022-38028 - CVSS 7.8 (high), 2022-10-11: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-37969 - CVSS 7.8 (high), 2022-09-13: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-34713 - CVSS 7.8 (high), 2022-08-09: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-22047 - CVSS 7.8 (high), 2022-07-12: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
• CVE-2022-30190 - CVSS 7.8 (high), 2022-06-01: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully…
• CVE-2022-26925 - CVSS 8.1 (high), 2022-05-10: Windows LSA Spoofing Vulnerability
• CVE-2022-26923 - CVSS 8.8 (high), 2022-05-10: Active Directory Domain Services Elevation of Privilege Vulnerability
• CVE-2022-26934 - CVSS 6.5 (medium), 2022-05-10: Windows Graphics Component Information Disclosure Vulnerability
• CVE-2022-26904 - CVSS 7 (high), 2022-04-15: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-24521 - CVSS 7.8 (high), 2022-04-15: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-22718 - CVSS 7.8 (high), 2022-02-09: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-21999 - CVSS 7.8 (high), 2022-02-09: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-21971 - CVSS 7.8 (high), 2022-02-09: Windows Runtime Remote Code Execution Vulnerability
• CVE-2022-21919 - CVSS 7 (high), 2022-01-11: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-21882 - CVSS 7.8 (high), 2022-01-11: Win32k Elevation of Privilege Vulnerability
• CVE-2022-21871 - CVSS 7.8 (high), 2022-01-11: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
• CVE-2021-43226 - CVSS 7.8 (high), 2021-12-15: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2021-41379 - CVSS 7.8 (high), 2021-11-10: Windows Installer Elevation of Privilege Vulnerability
• CVE-2021-41357 - CVSS 7.8 (high), 2021-10-13: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40450 - CVSS 7.8 (high), 2021-10-13: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40449 - CVSS 7.8 (high), 2021-10-13: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40444 - CVSS 8.8 (high), 2021-09-15: Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks…
• CVE-2021-36955 - CVSS 7.8 (high), 2021-09-15: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2021-36948 - CVSS 7.8 (high), 2021-08-12: Windows Update Medic Service Elevation of Privilege Vulnerability
• CVE-2021-34484 - CVSS 7.8 (high), 2021-08-12: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34486 - CVSS 7.8 (high), 2021-08-12: Windows Event Tracing Elevation of Privilege Vulnerability
• CVE-2021-36934 - CVSS 7.8 (high), 2021-07-22: An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security…
• CVE-2021-34448 - CVSS 8.8 (high), 2021-07-16: Scripting Engine Memory Corruption Vulnerability
• CVE-2021-33771 - CVSS 7.8 (high), 2021-07-14: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-31979 - CVSS 7.8 (high), 2021-07-14: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-33742 - CVSS 8.8 (high), 2021-06-08: Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2021-33739 - CVSS 8.4 (high), 2021-06-08: Microsoft DWM Core Library Elevation of Privilege Vulnerability
• CVE-2021-31199 - CVSS 7.8 (high), 2021-06-08: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
• CVE-2021-31956 - CVSS 7.8 (high), 2021-06-08: Windows NTFS Elevation of Privilege Vulnerability
• CVE-2021-1675 - CVSS 7.8 (high), 2021-06-08: Windows Print Spooler Remote Code Execution Vulnerability
• CVE-2021-31955 - CVSS 5.5 (medium), 2021-06-08: Windows Kernel Information Disclosure Vulnerability
• CVE-2021-31201 - CVSS 7.8 (high), 2021-06-08: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
• CVE-2013-3900 - CVSS 8.8 (high), 2013-12-11: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to…