Known vulnerabilities in Microsoft Windows 10 21H2 10.0.19044.1288 - page 44

Vendor: Microsoft
Version: 10 21H2 10.0.19044.1288
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 2804
Public exploits: 94
Known exploited (KEV): 96
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 10 21H2 10.0.19044.1288 Microsoft Windows 10 21H2 10.0.19044.1288 is affected by 2804 vulnerabilities: 27 critical, 455 high, 595 medium, 1726 low Critical High Medium Low

Vulnerabilities (2804)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121233 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-20831
CWE-367 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011372
#VU121231 - Improper Access Control
CVE-2026-20929
CWE-284 Medium
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223 13.01.2026 SB2026011371
#VU121230 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20805
CWE-200 High
No
Exploited
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011370
#VU121228 - Use of Uninitialized Resource
CVE-2026-20962
CWE-908 Low
No
No
10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011368
#VU119481 - Heap-based Buffer Overflow
CVE-2025-62454
CWE-122 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462, 11 25H2 10.0.26200.7092 09.12.2025 SB2025120984
#VU119480 - Out-of-bounds read
CVE-2025-62457
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120984
#VU119479 - Improper input validation
CVE-2025-62571
CWE-20 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120982
#VU119478 - Improper input validation
CVE-2025-62455
CWE-20 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146 09.12.2025 SB2025120981
#VU119477 - Out-of-bounds read
CVE-2025-62462
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119476 - Out-of-bounds read
CVE-2025-62461
CWE-125 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119474 - Integer underflow
CVE-2025-62567
CWE-191 Medium
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120978
#VU119473 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64661
CWE-362 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120977
#VU119469 - Missing Authentication for Critical Function
CVE-2025-59516
CWE-306 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119468 - Improper Access Control
CVE-2025-59517
CWE-284 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119467 - Improper Access Control
CVE-2025-64673
CWE-284 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119466 - Exposure of sensitive information to an unauthorized actor
CVE-2025-64670
CWE-200 Medium
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120973
#VU119464 - Untrusted Pointer Dereference
CVE-2025-62549
CWE-822 High
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120971
#VU119463 - Out-of-bounds read
CVE-2025-62473
CWE-125 Medium
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120971
#VU119461 - Heap-based Buffer Overflow
CVE-2025-62470
CWE-122 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120970
#VU119460 - NULL Pointer Dereference
CVE-2025-62466
CWE-476 Low
No
No
10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120968


Showing elements 861 - 880 out of 2804