Microsoft Corp Windows 10 21H2

Name: Microsoft Corp Windows 10 21H2
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

49critical399high248medium23low

updated 2026-10-27

vulnerabilities (2,997)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	no fix	2023-07-11	—
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	no fix	2024-02-13	—
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	no fix	2022-06-01	—
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	—
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	no fix	2025-06-10	—
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	no fix	2024-11-12	—
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	—
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	no fix	2022-05-10	—
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	no fix	2025-06-10	—
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ 10.0.19044.7184
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 10.0.19044.7184
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	no fix	2024-06-11	—
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	no fix	2025-03-11	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	≤ 10.0.19044.6937
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	no fix	2024-02-13	—
CVE-2022-21882US	high7.8OT critical	59.2% (99th)	KEV	no fix	2022-01-11	—
CVE-2022-21971US	high9.3OT critical	53.8% (99th)	KEV	no fix	2022-02-09	—
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	no fix	2023-04-11	—
CVE-2024-29988US	—OT critical	45.2% (99th)	KEV	no fix	2024-04-09	—
CVE-2013-3900US	high7.6OT critical	44.6% (99th)	KEV	no fix	2013-12-11	—
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	no fix	2023-07-11	—
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	no fix	2022-02-09	—
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	no fix	2023-01-10	—
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	—
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	no fix	2024-08-13	—
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	no fix	2022-09-13	—
CVE-2023-36802US	—OT critical	27.9% (98th)	KEV	no fix	2023-09-12	—
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	no fix	2025-05-13	—
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	no fix	2024-12-12	—
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	no fix	2024-06-11	—
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	no fix	2023-06-14	—
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	no fix	2025-04-08	—
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	no fix	2022-02-09	—
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	no fix	2022-04-15	—
CVE-2024-49039US	—OT critical	14.2% (97th)	KEV	no fix	2024-11-12	—
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	—
CVE-2025-21333US	—OT critical	10.1% (96th)	KEV	no fix	2025-01-14	—
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	no fix	2026-01-13	≤ 10.0.19044.6809
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	no fix	2022-04-15	—
CVE-2025-24990US	—OT critical	6.37% (94th)	KEV	no fix	2025-10-14	≤ 10.0.19044.6456
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	no fix	2024-05-14	—
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	no fix	2023-02-14	—
CVE-2025-47827US	—OT critical	4.93% (92nd)	KEV	no fix	2025-06-05	≤ 10.0.19044.6456
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	no fix	2025-11-11	≤ 10.0.19044.6575
CVE-2026-21533US	—OT critical	4.15% (91st)	KEV	no fix	2026-02-10	≤ 10.0.19044.6937
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	no fix	2024-03-12	—
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	no fix	2025-03-11	—
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	no fix	2025-12-09	≤ 10.0.19044.6691
CVE-2025-30400US	—OT critical	1.92% (80th)	KEV	no fix	2025-05-13	—

showing 50 of 2,997

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow479 CVEs
CWE-416Use After Free445 CVEs
CWE-20Improper Input Validation410 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')303 CVEs
CWE-264CWE-264269 CVEs
CWE-125Out-of-bounds Read254 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor197 CVEs
CWE-269Improper Privilege Management158 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)2,993 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan