Microsoft Windows 10 21h1 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows 10 21h1, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (83)

• CVE-2024-30080 — CVSS 9.8 (critical): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2022-35744 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
• CVE-2021-40444 — CVSS 8.8 (high) — actively exploited: <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware…
• CVE-2022-41128 — CVSS 8.8 (high) — actively exploited: Windows Scripting Languages Remote Code Execution Vulnerability
• CVE-2023-36577 — CVSS 8.8 (high): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
• CVE-2022-26923 — CVSS 8.8 (high) — actively exploited: Active Directory Domain Services Elevation of Privilege Vulnerability
• CVE-2024-21420 — CVSS 8.8 (high): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
• CVE-2021-33739 — CVSS 8.4 (high) — actively exploited: Microsoft DWM Core Library Elevation of Privilege Vulnerability
• CVE-2022-35753 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2022-26925 — CVSS 8.1 (high) — actively exploited: Windows LSA Spoofing Vulnerability
• CVE-2022-35752 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2023-21712 — CVSS 8.1 (high): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2024-21357 — CVSS 8.1 (high): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
• CVE-2022-35745 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2021-40449 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40450 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-41357 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-43226 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2023-36598 — CVSS 7.8 (high): Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
• CVE-2023-36594 — CVSS 7.8 (high): Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2022-37969 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-21999 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-22047 — CVSS 7.8 (high) — actively exploited: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
• CVE-2022-22718 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-24521 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2023-36436 — CVSS 7.8 (high): Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2022-30190 — CVSS 7.8 (high) — actively exploited: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An…
• CVE-2022-34713 — CVSS 7.8 (high) — actively exploited: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-35743 — CVSS 7.8 (high): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-35746 — CVSS 7.8 (high): Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35749 — CVSS 7.8 (high): Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35750 — CVSS 7.8 (high): Win32k Elevation of Privilege Vulnerability
• CVE-2022-41125 — CVSS 7.8 (high) — actively exploited: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
• CVE-2022-35756 — CVSS 7.8 (high): Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2022-41094 — CVSS 7.8 (high): Windows Hyper-V Elevation of Privilege Vulnerability
• CVE-2022-41073 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-41033 — CVSS 7.8 (high) — actively exploited: Windows COM+ Event System Service Elevation of Privilege Vulnerability
• CVE-2022-21971 — CVSS 7.8 (high) — actively exploited: Windows Runtime Remote Code Execution Vulnerability
• CVE-2022-38028 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2024-38252 — CVSS 7.8 (high): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2024-38250 — CVSS 7.8 (high): Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-38046 — CVSS 7.8 (high): PowerShell Elevation of Privilege Vulnerability
• CVE-2021-31956 — CVSS 7.8 (high) — actively exploited: Windows NTFS Elevation of Privilege Vulnerability
• CVE-2021-31979 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-1675 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Remote Code Execution Vulnerability
• CVE-2021-33771 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-34484 — CVSS 7.8 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34486 — CVSS 7.8 (high) — actively exploited: Windows Event Tracing Elevation of Privilege Vulnerability
• CVE-2021-36934 — CVSS 7.8 (high) — actively exploited: <p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files…
• CVE-2021-36948 — CVSS 7.8 (high) — actively exploited: Windows Update Medic Service Elevation of Privilege Vulnerability
• CVE-2021-36955 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2024-38257 — CVSS 7.5 (high): Microsoft AllJoyn API Information Disclosure Vulnerability
• CVE-2021-33742 — CVSS 7.5 (high) — actively exploited: Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2023-36567 — CVSS 7.5 (high): Windows Deployment Services Information Disclosure Vulnerability
• CVE-2023-36585 — CVSS 7.5 (high): Windows upnphost.dll Denial of Service Vulnerability
• CVE-2023-36596 — CVSS 7.5 (high): Remote Procedure Call Information Disclosure Vulnerability
• CVE-2023-36602 — CVSS 7.5 (high): Windows TCP/IP Denial of Service Vulnerability
• CVE-2024-38119 — CVSS 7.5 (high): Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
• CVE-2022-35755 — CVSS 7.3 (high): Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-35757 — CVSS 7.3 (high): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2022-26904 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-21871 — CVSS 7.0 (high): Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
• CVE-2022-21882 — CVSS 7.0 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2022-21919 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34448 — CVSS 6.8 (medium) — actively exploited: Scripting Engine Memory Corruption Vulnerability
• CVE-2022-35754 — CVSS 6.7 (medium): Unified Write Filter Elevation of Privilege Vulnerability
• CVE-2022-44684 — CVSS 6.5 (medium): Windows Local Session Manager (LSM) Denial of Service Vulnerability
• CVE-2022-26934 — CVSS 6.5 (medium): Windows Graphics Component Information Disclosure Vulnerability
• CVE-2022-35759 — CVSS 6.5 (medium): Windows Local Security Authority (LSA) Denial of Service Vulnerability
• CVE-2022-35747 — CVSS 5.9 (medium): Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
• CVE-2021-41379 — CVSS 5.5 (medium) — actively exploited: Windows Installer Elevation of Privilege Vulnerability
• CVE-2024-38254 — CVSS 5.5 (medium): Windows Authentication Information Disclosure Vulnerability
• CVE-2024-38256 — CVSS 5.5 (medium): Windows Kernel-Mode Driver Information Disclosure Vulnerability
• CVE-2023-36576 — CVSS 5.5 (medium): Windows Kernel Information Disclosure Vulnerability
• CVE-2021-31955 — CVSS 5.5 (medium) — actively exploited: Windows Kernel Information Disclosure Vulnerability
• CVE-2013-3900 — CVSS 5.5 (medium) — actively exploited: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security…
• CVE-2022-35758 — CVSS 5.5 (medium): Windows Kernel Memory Information Disclosure Vulnerability
• CVE-2022-41091 — CVSS 5.4 (medium) — actively exploited: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2022-41049 — CVSS 5.4 (medium) — actively exploited: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2022-44698 — CVSS 5.4 (medium) — actively exploited: Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2023-36584 — CVSS 5.4 (medium) — actively exploited: Windows Mark of the Web Security Feature Bypass Vulnerability
• CVE-2021-31199 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
• CVE-2021-31201 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability