Microsoft Windows 10 HLK version 21H2
productDEcpe:/o:microsoft:windows_10:hlk_version_21h2
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
critical
by severity
0critical1high1medium0low
updated 2026-10-27
01
vulnerabilities (44)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-30397US | —OT critical | KEV |
| CVE-2025-30400US | —OT critical | KEV |
| CVE-2025-32709US | —OT critical | KEV |
| CVE-2025-32706US | —OT critical | KEV |
| CVE-2025-32701US | —OT critical | KEV |
| CVE-2025-29969US | — | Exploit |
| CVE-2025-29971US | — | — |
| CVE-2025-30394US | — | — |
| CVE-2025-29962US | — | — |
| CVE-2025-30388US | — | — |
| CVE-2025-29968US | — | — |
| CVE-2025-26677US | — | — |
| CVE-2025-29960US | — | — |
| CVE-2025-29959US | — | — |
| CVE-2025-29954US | — | — |
| CVE-2025-29961US | — | — |
| CVE-2025-29958US | — | — |
| CVE-2025-29966US | — | — |
| CVE-2025-29836US | — | — |
| CVE-2025-29835US | — | — |
| CVE-2025-29832US | — | — |
| CVE-2025-29830US | — | — |
| CVE-2025-29967US | — | — |
| CVE-2025-29956US | — | — |
| CVE-2025-29964US | — | — |
| CVE-2025-29963US | — | — |
| CVE-2025-29840US | — | — |
| CVE-2025-29831US | — | — |
| CVE-2025-29974US | — | — |
| CVE-2025-24063US | — | — |
| CVE-2025-29837US | — | — |
| CVE-2025-29957US | — | — |
| CVE-2025-29955US | medium5.5 | — |
| CVE-2025-29829US | — | — |
| CVE-2025-32707US | — | — |
| CVE-2025-29970US | — | — |
| CVE-2025-30385US | — | — |
| CVE-2025-29839US | — | — |
| CVE-2025-29833US | — | — |
| CVE-2025-29842US | —OT elevated | — |
| CVE-2025-29841US | — | — |
| CVE-2025-27488US | —OT elevated | — |
| CVE-2025-29838US | high7.0 | — |
| CVE-2025-27468US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-125Out-of-bounds Read10 CVEs
- CWE-787Out-of-bounds Write8 CVEs
- CWE-122Heap-based Buffer Overflow7 CVEs
- CWE-416Use After Free7 CVEs
- CWE-908Use of Uninitialized Resource4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
- CWE-400Uncontrolled Resource Consumption3 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)44 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan