Microsoft Windows 10 21h1
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Windows 10 21h1.
By the Year
In 2025 there have been 0 vulnerabilities in Microsoft Windows 10 21h1. Last year, in 2024 Windows 10 21h1 had 10 security vulnerabilities published. Right now, Windows 10 21h1 is on track to have less security vulnerabilities in 2025 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2025 | 0 | 0.00 |
| 2024 | 10 | 7.68 |
| 2023 | 27 | 7.41 |
| 2022 | 24 | 7.38 |
| 2021 | 20 | 7.33 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Windows 10 21h1 vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Windows 10 21h1 Security Vulnerabilities
Microsoft AllJoyn API Information Disclosure Vulnerability
CVE-2024-38257
7.5 - High
- September 10, 2024
Microsoft AllJoyn API Information Disclosure Vulnerability
Use of Uninitialized Resource
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38046
7.8 - High
- September 10, 2024
PowerShell Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Information Disclosure Vulnerability
CVE-2024-38256
5.5 - Medium
- September 10, 2024
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Use of Uninitialized Resource
Windows Authentication Information Disclosure Vulnerability
CVE-2024-38254
6.2 - Medium
- September 10, 2024
Windows Authentication Information Disclosure Vulnerability
Use of Uninitialized Resource
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2024-38252
7.8 - High
- September 10, 2024
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Dangling pointer
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38250
7.8 - High
- September 10, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Buffer Over-read
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
CVE-2024-38119
7.5 - High
- September 10, 2024
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
Dangling pointer
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-30080
9.8 - Critical
- June 11, 2024
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Dangling pointer
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21420
8.8 - High
- February 13, 2024
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2024-21357
8.1 - High
- February 13, 2024
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2022-44684
6.5 - Medium
- December 20, 2023
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
CVE-2023-36596
7.5 - High
- October 10, 2023
Remote Procedure Call Information Disclosure Vulnerability
Exposure of Resource to Wrong Sphere
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2023-36584
5.4 - Medium
- October 10, 2023
Windows Mark of the Web Security Feature Bypass Vulnerability
Windows upnphost.dll Denial of Service Vulnerability
CVE-2023-36585
7.5 - High
- October 10, 2023
Windows upnphost.dll Denial of Service Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-36594
7.8 - High
- October 10, 2023
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
CVE-2023-36598
7.8 - High
- October 10, 2023
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-36602
7.5 - High
- October 10, 2023
Windows TCP/IP Denial of Service Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-36436
7.8 - High
- October 10, 2023
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows Deployment Services Information Disclosure Vulnerability
CVE-2023-36567
7.5 - High
- October 10, 2023
Windows Deployment Services Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
CVE-2023-36576
5.5 - Medium
- October 10, 2023
Windows Kernel Information Disclosure Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36577
8.8 - High
- October 10, 2023
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-35756
7.8 - High
- May 31, 2023
Windows Kerberos Elevation of Privilege Vulnerability
Windows Local Security Authority (LSA) Denial of Service Vulnerability
CVE-2022-35759
6.5 - Medium
- May 31, 2023
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-35743
7.8 - High
- May 31, 2023
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Code Injection
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35745
8.1 - High
- May 31, 2023
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-35746
7.8 - High
- May 31, 2023
Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVE-2022-35747
5.9 - Medium
- May 31, 2023
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-35749
7.8 - High
- May 31, 2023
Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2022-35757
7.3 - High
- May 31, 2023
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-35755
7.3 - High
- May 31, 2023
Windows Print Spooler Elevation of Privilege Vulnerability
Unified Write Filter Elevation of Privilege Vulnerability
CVE-2022-35754
6.7 - Medium
- May 31, 2023
Unified Write Filter Elevation of Privilege Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35753
8.1 - High
- May 31, 2023
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35752
8.1 - High
- May 31, 2023
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2022-35750
7.8 - High
- May 31, 2023
Win32k Elevation of Privilege Vulnerability
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-35744
9.8 - Critical
- May 31, 2023
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-35758
5.5 - Medium
- May 31, 2023
Windows Kernel Memory Information Disclosure Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-21712
8.1 - High
- April 27, 2023
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Race Condition
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2022-41094
7.8 - High
- December 13, 2022
Windows Hyper-V Elevation of Privilege Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2022-44698
5.4 - Medium
- December 13, 2022
Windows SmartScreen Security Feature Bypass Vulnerability
Improper Handling of Exceptional Conditions
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41049
5.4 - Medium
- November 09, 2022
Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41073
7.8 - High
- November 09, 2022
Windows Print Spooler Elevation of Privilege Vulnerability
Memory Corruption
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41091
5.4 - Medium
- November 09, 2022
Windows Mark of the Web Security Feature Bypass Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41125
7.8 - High
- November 09, 2022
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Memory Corruption
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41128
8.8 - High
- November 09, 2022
Windows Scripting Languages Remote Code Execution Vulnerability
Memory Corruption
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-41033
7.8 - High
- October 11, 2022
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Object Type Confusion
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-38028
7.8 - High
- October 11, 2022
Windows Print Spooler Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-37969
7.8 - High
- September 13, 2022
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Memory Corruption
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-34713
7.8 - High
- August 09, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-22047
7.8 - High
- July 12, 2022
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Untrusted Path
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word
CVE-2022-30190
7.8 - High
- June 01, 2022
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the users rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
Externally Controlled Reference to a Resource in Another Sphere
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows 10 1507 or by Microsoft? Click the Watch button to subscribe.
