W1
Product
Windows 10 Version 21H1
On CISA KEVExploited in the wildRansomware-linked
661
CVEs
31
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 17High 477Medium 6Low 0
Watch
Add Windows 10 Version 21H1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26831 | 7.5 | Apr 15 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1645 |
| CVE-2022-24534 | 7.5 | Apr 15 | Win32 Stream Enumeration Remote Code Execution Vulnerability Affected: 10.0.0 before 10.0.19043.1645 |
| CVE-2022-24485 | 7.5 | Apr 15 | Win32 File Enumeration Remote Code Execution Vulnerability Affected: 10.0.0 before 10.0.19043.1645 |
| CVE-2022-21983 | 7.5 | Apr 15 | Win32 Stream Enumeration Remote Code Execution Vulnerability Affected: 10.0.0 before 10.0.19043.1645 |
| CVE-2022-21993 | 7.5 | Feb 9 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1526 |
| CVE-2022-21913 | 7.5 | Jan 11 | Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21904 | 7.5 | Jan 11 | Windows GDI Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21890 | 7.5 | Jan 11 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21889 | 7.5 | Jan 11 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21883 | 7.5 | Jan 11 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21880 | 7.5 | Jan 11 | Windows GDI+ Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21848 | 7.5 | Jan 11 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2022-21843 | 7.5 | Jan 11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: 10.0.0 before 10.0.19043.1466 |
| CVE-2021-41356 | 7.5 | Nov 10 | Windows Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1348 |
| CVE-2021-36960 | 7.5 | Sep 15 | Windows SMB Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1237 |
| CVE-2021-36933 | 7.5 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1165 |
| CVE-2021-36932 | 7.5 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1165 |
| CVE-2021-36926 | 7.5 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1165 |
| CVE-2021-26433 | 7.5 | Aug 12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1165 |
| CVE-2021-34490 | 7.5 | Jul 14 | Windows TCP/IP Driver Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2021-34476 | 7.5 | Jul 14 | Bowser.sys Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2021-33788 | 7.5 | Jul 14 | Windows LSA Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2021-33785 | 7.5 | Jul 14 | Windows AF_UNIX Socket Provider Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2021-33772 | 7.5 | Jul 14 | Windows TCP/IP Driver Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2021-31183 | 7.5 | Jul 14 | Windows TCP/IP Driver Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1110 |
| CVE-2022-30209 | 7.4 | Jul 12 | Windows IIS Server Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-30203 | 7.4 | Jul 12 | Windows Boot Manager Security Feature Bypass Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-26913 | 7.4 | May 10 | Windows Authentication Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1706 |
| CVE-2021-38665 | 7.4 | Nov 10 | Remote Desktop Protocol Client Information Disclosure Vulnerability Affected: 10.0.0 before 10.0.19043.1348 |
| CVE-2022-35757 | 7.3 | May 31 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1889 |
| CVE-2022-35755 | 7.3 | May 31 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1889 |
| CVE-2022-30170 | 7.3 | Sep 13 | Windows Credential Roaming Service Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2006 |
| CVE-2022-35793 | 7.3 | Aug 9 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1889 |
| CVE-2022-22040 | 7.3 | Jul 12 | Internet Information Services Dynamic Compression Module Denial of Service Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-26826 | 7.2 | Apr 15 | Windows DNS Server Remote Code Execution Vulnerability Affected: 10.0.0 before 10.0.19043.1645 |
| CVE-2022-23284 | 7.2 | Mar 9 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1586 |
| CVE-2022-38042 | 7.1 | Oct 11 | Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2130 |
| CVE-2022-35822 | 7.1 | Aug 15 | Windows Defender Credential Guard Security Feature Bypass Vulnerability Affected: 10.0.0 before 10.0.19043.1889 |
| CVE-2022-34690 | 7.1 | Aug 9 | Windows Fax Service Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1889 |
| CVE-2022-30226 | 7.1 | Jul 12 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-30225 | 7.1 | Jul 12 | Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-22022 | 7.1 | Jul 12 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1826 |
| CVE-2022-21997 | 7.1 | Feb 9 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1526 |
| CVE-2021-38634 | 7.1 | Sep 15 | Microsoft Windows Update Client Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.1237 |
| CVE-2022-41114 | 7.0 | Nov 9 | Windows Bind Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2251 |
| CVE-2022-38027 | 7.0 | Oct 11 | Windows Storage Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2130 |
| CVE-2022-38029 | 7.0 | Oct 11 | Windows ALPC Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2130 |
| CVE-2022-38021 | 7.0 | Oct 11 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2130 |
| CVE-2022-34725 | 7.0 | Sep 13 | Windows ALPC Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2006 |
| CVE-2022-26928 | 7.0 | Sep 13 | Windows Photo Import API Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.19043.2006 |
The 500 most important CVEs for this product (exploited first, then by severity)