Windows 10 Version 1909 for ARM64-based Systems

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

2critical111high254medium37low

updated 2026-10-28

vulnerabilities (404)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	10.0.18363.1801	2021-09-15	2 versions
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	10.0.18363.2274	2022-05-10	2 versions
CVE-2021-36934US	medium4.6OT critical	67.3% (99th)	KEV	10.0.18363.1734	2021-07-22	2 versions
CVE-2022-21882US	high7.8OT critical	59.2% (99th)	KEV	10.0.18363.2037	2022-01-11	2 versions
CVE-2022-21971US	high9.3OT critical	53.8% (99th)	KEV	10.0.18363.2094	2022-02-09	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	10.0.18363.2094	2022-02-09	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	10.0.18363.2094	2022-02-09	2 versions
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	10.0.18363.2212	2022-04-15	2 versions
CVE-2021-34486US	medium4.6OT critical	9.33% (95th)	KEV	10.0.18363.1734	2021-08-12	2 versions
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	10.0.18363.2212	2022-04-15	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	10.0.18363.1801	2021-09-15	2 versions
CVE-2021-34448US	high9.3OT critical	40.1% (99th)	KEV	10.0.18363.1679	2021-07-16	2 versions
CVE-2021-36948US	medium4.6OT critical	23.3% (98th)	KEV	10.0.18363.1734	2021-08-12	2 versions
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	10.0.18363.1734	2021-08-12	2 versions
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	10.0.18363.1916	2021-11-10	2 versions
CVE-2022-26925US	medium5.9OT critical	10.5% (96th)	KEV	10.0.18363.2274	2022-05-10	2 versions
CVE-2021-33771US	high7.2OT critical	10.2% (96th)	KEV	10.0.18363.1679	2021-07-14	2 versions
CVE-2021-31979US	high7.2OT critical	4.54% (92nd)	KEV	10.0.18363.1679	2021-07-14	2 versions
CVE-2022-21919US	medium6.9OT critical	2.43% (84th)	KEV	10.0.18363.2037	2022-01-11	2 versions
CVE-2022-26809US	high10.0	90.9% (100th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2022-23270US	high9.3	70.3% (99th)	Exploit	10.0.18363.2274	2022-05-10	2 versions
CVE-2022-23253US	medium4.0	56.4% (99th)	Exploit	10.0.18363.2158	2022-03-09	2 versions
CVE-2021-34481US	high7.5	47.7% (99th)	Exploit	10.0.18363.1734	2021-07-16	2 versions
CVE-2022-24500US	medium6.8	38.0% (99th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2022-24497US	high7.5	34.8% (98th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2022-24491US	high7.5	33.5% (98th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2022-21881US	high7.2	24.2% (98th)	Exploit	10.0.18363.2037	2022-01-11	2 versions
CVE-2022-24481US	medium4.6	16.8% (97th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2021-38666US	medium6.8	15.2% (97th)	Exploit	10.0.18363.1916	2021-11-10	2 versions
CVE-2022-22715US	high7.2	13.5% (96th)	Exploit	10.0.18363.2094	2022-02-09	2 versions
CVE-2022-21894US	medium4.9OT elevated	6.77% (94th)	Exploit	10.0.18363.2037	2022-01-11	2 versions
CVE-2022-21974US	high9.3	5.01% (92nd)	Exploit	10.0.18363.2094	2022-02-09	2 versions
CVE-2022-26927US	high8.8	4.60% (92nd)	Exploit	10.0.18363.2274	2022-05-10	2 versions
CVE-2021-26868US	medium4.6	3.08% (88th)	Exploit	10.0.18363.1440	2021-03-11	2 versions
CVE-2022-21877US	medium4.9	2.89% (87th)	Exploit	10.0.18363.2037	2022-01-11	2 versions
CVE-2022-24483US	medium4.9	2.26% (83rd)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2021-26882US	medium4.6	2.11% (82nd)	Exploit	10.0.18363.1440	2021-03-11	2 versions
CVE-2022-24494US	medium4.6	1.91% (80th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2021-26871US	medium4.6	1.43% (73rd)	Exploit	10.0.18363.1440	2021-03-11	2 versions
CVE-2021-38639US	medium4.6	1.36% (72nd)	Exploit	10.0.18363.1801	2021-09-15	2 versions
CVE-2022-26810US	medium4.6	0.60% (49th)	Exploit	10.0.18363.2212	2022-04-15	2 versions
CVE-2022-21972US	high9.3	79.3% (100th)	—	10.0.18363.2274	2022-05-10	2 versions
CVE-2021-26424US	medium6.8	61.1% (99th)	—	10.0.18363.1734	2021-08-12	2 versions
CVE-2022-21993US	high7.8	43.6% (99th)	—	10.0.18363.2094	2022-02-09	2 versions
CVE-2021-34480US	medium6.8	34.2% (98th)	—	10.0.18363.1734	2021-08-12	2 versions
CVE-2022-24502US	medium4.3	33.1% (98th)	—	10.0.18363.2158	2022-03-09	2 versions
CVE-2021-36958US	high9.3	30.8% (98th)	—	10.0.18363.1801	2021-08-12	2 versions
CVE-2022-23285US	medium6.8	25.6% (98th)	—	10.0.18363.2158	2022-03-09	2 versions
CVE-2022-21990US	medium6.8	18.8% (97th)	—	10.0.18363.2158	2022-03-09	2 versions
CVE-2021-26863US	high7.2	11.9% (96th)	—	10.0.18363.1440	2021-03-11	2 versions

showing 50 of 404

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management161 CVEs
CWE-264CWE-26479 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')58 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor49 CVEs
CWE-20Improper Input Validation40 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')24 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer12 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')12 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)404 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan