Microsoft

Windows 10 21h2

1487 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7

CVE-2025-49678

  • EPSS 0.05%
  • Published 08.07.2025 16:57:54
  • Last modified 15.07.2025 17:16:56

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8

CVE-2025-49667

  • EPSS 0.07%
  • Published 08.07.2025 16:57:52
  • Last modified 15.07.2025 16:33:50

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

5.5

CVE-2025-49664

  • EPSS 0.08%
  • Published 08.07.2025 16:57:50
  • Last modified 15.07.2025 16:24:34

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally.

7.8

CVE-2025-49665

  • EPSS 0.05%
  • Published 08.07.2025 16:57:50
  • Last modified 15.07.2025 16:26:14

Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

7.8

CVE-2025-49659

  • EPSS 0.07%
  • Published 08.07.2025 16:57:48
  • Last modified 15.07.2025 14:53:09

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

7.8

CVE-2025-49660

  • EPSS 0.07%
  • Published 08.07.2025 16:57:48
  • Last modified 15.07.2025 14:51:38

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

8.6

CVE-2025-48822

Media report
  • EPSS 0.08%
  • Published 08.07.2025 16:57:47
  • Last modified 15.07.2025 14:37:44

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

5.9

CVE-2025-48823

  • EPSS 0.03%
  • Published 08.07.2025 16:57:47
  • Last modified 15.07.2025 14:37:14

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network.

7.8

CVE-2025-48820

  • EPSS 0.1%
  • Published 08.07.2025 16:57:46
  • Last modified 15.07.2025 14:38:40

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

7.1

CVE-2025-48821

  • EPSS 0.31%
  • Published 08.07.2025 16:57:46
  • Last modified 15.07.2025 14:38:22

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.