Microsoft: >> Windows 10 21h2 >> 10.0.19042.2486 Security Vulnerabilities
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-07-14
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVSS Score
6.5
EPSS Score
0.008
Published
2026-07-14
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-07-14
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.007
Published
2026-07-14
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
CVSS Score
8.0
EPSS Score
0.005
Published
2026-07-14
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-07-14
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-07-14
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-07-14
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-07-14
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-07-14