W1
Product
Windows 10 Version 21H1
On CISA KEVExploited in the wildRansomware-linked
83
CVEs
44
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 61Medium 20Low 0
Watch
Add Windows 10 Version 21H1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: before 10.0.19043.1889 |
| CVE-2023-21712 | 8.1 | Apr 27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.19043.2251 |
| CVE-2024-38046 | 7.8 | Sep 10 | PowerShell Elevation of Privilege Vulnerability Affected: before 10.0.19044.4894; before 10.0.19044.4894; before 10.0.19044.4894 |
| CVE-2024-38252 | 7.8 | Sep 10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: before 10.0.19044.4894 |
| CVE-2024-38250 | 7.8 | Sep 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19044.4894; before 10.0.19044.4894; before 10.0.19044.4894 |
| CVE-2023-36598 | 7.8 | Oct 10 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2023-36594 | 7.8 | Oct 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2023-36436 | 7.8 | Oct 10 | Windows MSHTML Platform Remote Code Execution Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2022-35756 | 7.8 | May 31 | Windows Kerberos Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-35750 | 7.8 | May 31 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-35749 | 7.8 | May 31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889 |
| CVE-2022-35746 | 7.8 | May 31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889 |
| CVE-2022-35743 | 7.8 | May 31 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Affected: before 10.0.19043.1889 |
| CVE-2022-41094 | 7.8 | Dec 13 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-21871 | 7.8 | Jan 11 | Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Affected: before 10.0.19043.1466 |
| CVE-2024-38119 | 7.5 | Sep 10 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Affected: before 10.0.19044.4894; before 10.0.19044.4894; before 10.0.19044.4894 |
| CVE-2024-38257 | 7.5 | Sep 10 | Microsoft AllJoyn API Information Disclosure Vulnerability Affected: before 10.0.19044.4894 |
| CVE-2023-36602 | 7.5 | Oct 10 | Windows TCP/IP Denial of Service Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2023-36596 | 7.5 | Oct 10 | Remote Procedure Call Information Disclosure Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2023-36585 | 7.5 | Oct 10 | Windows upnphost.dll Denial of Service Vulnerability Affected: before 10.0.19041.3570; before 10.0.19041.3570; before 10.0.19041.3570 |
| CVE-2023-36567 | 7.5 | Oct 10 | Windows Deployment Services Information Disclosure Vulnerability Affected: before 10.0.19041.3570 |
| CVE-2022-35757 | 7.3 | May 31 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-35755 | 7.3 | May 31 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-35754 | 6.7 | May 31 | Unified Write Filter Elevation of Privilege Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-44684 | 6.5 | Dec 20 | Windows Local Session Manager (LSM) Denial of Service Vulnerability Affected: before 10.0.19043.2364 |
| CVE-2022-35759 | 6.5 | May 31 | Windows Local Security Authority (LSA) Denial of Service Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |
| CVE-2022-26934 | 6.5 | May 10 | Windows Graphics Component Information Disclosure Vulnerability Affected: before 10.0.19043.1706 |
| CVE-2024-38254 | 6.2 | Sep 10 | Windows Authentication Information Disclosure Vulnerability Affected: before 10.0.19044.4894 |
| CVE-2022-35747 | 5.9 | May 31 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Affected: before 10.0.19043.1889 |
| CVE-2024-38256 | 5.5 | Sep 10 | Windows Kernel-Mode Driver Information Disclosure Vulnerability Affected: before 10.0.19044.4894 |
| CVE-2023-36576 | 5.5 | Oct 10 | Windows Kernel Information Disclosure Vulnerability Affected: before 10.0.19041.3570 |
| CVE-2022-35758 | 5.5 | May 31 | Windows Kernel Memory Information Disclosure Vulnerability Affected: before 10.0.19043.1889; before 10.0.19043.1889; before 10.0.19043.1889 |