Known vulnerabilities in Microsoft Windows 10 21H2 10.0.19044.1288 - page 39

Vendor: Microsoft
Version: 10 21H2 10.0.19044.1288
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 2804
Public exploits: 94
Known exploited (KEV): 96
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 10 21H2 10.0.19044.1288 Microsoft Windows 10 21H2 10.0.19044.1288 is affected by 2804 vulnerabilities: 27 critical, 455 high, 595 medium, 1726 low Critical High Medium Low

Vulnerabilities (2804)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123707 - Out-of-bounds read
CVE-2026-25181
CWE-125 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031072
#VU123703 - Incorrect Permission Assignment for Critical Resource
CVE-2026-24291
CWE-732 Low
Public exploit available
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123702 - Exposure of sensitive information to an unauthorized actor
CVE-2026-25186
CWE-200 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123700 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-25187
CWE-59 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031066
#VU123699 - Heap-based Buffer Overflow
CVE-2026-25188
CWE-122 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031065
#VU123692 - Improper Authentication
CVE-2026-24294
CWE-287 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031060
#VU123691 - Improper Authentication
CVE-2026-26128
CWE-287 Low
Public exploit available
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031060
#VU123689 - Integer overflow
CVE-2026-25173
CWE-190 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031057
#VU122589 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21237
CWE-362 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021096
#VU122588 - Use After Free
CVE-2026-21242
CWE-416 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021096
#VU122576 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21234
CWE-362 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021082
#VU122575 - Use After Free
CVE-2026-21235
CWE-416 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021081
#VU122574 - Heap-based Buffer Overflow
CVE-2026-21246
CWE-122 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021081
#VU122572 - Improper input validation
CVE-2026-21247
CWE-20 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021079
#VU122571 - Heap-based Buffer Overflow
CVE-2026-21248
CWE-122 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021079
#VU122570 - Heap-based Buffer Overflow
CVE-2026-21244
CWE-122 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021079
#VU122569 - Improper Access Control
CVE-2026-21255
CWE-284 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021079
#VU122563 - Out-of-bounds read
CVE-2026-20846
CWE-125 Medium
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021073
#VU122560 - Heap-based Buffer Overflow
CVE-2026-21236
CWE-122 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021069
#VU122559 - Improper Access Control
CVE-2026-21238
CWE-284 Low
No
No
10 21H2 10.0.19044.6937, 10 22H2 10.0.19045.6937, 10 1607 10.0.14393.8868, 10 1809 10.0.17763.8389, 11 23H2 10.0.22631.6649, 11 24H2 10.0.26100.7781, 11 24H2 10.0.26100.7840, 11 26H1 10.0.28000.1575 10.02.2026 SB2026021069


Showing elements 761 - 780 out of 2804