Windows · Fixed build
10.0.25398.2149
MSRC advisory29 CVEs fixed by this build, deployed across 1 Windows SKUs.
- Published on
- 2019-07-09
- SKUs covered
- 1
- CVEs fixed
- 29
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
- CISA KEV
- 5
- Critical
- 0
- High
- 28
- NVD pending
- 0
CVEs fixed by this build
| CVE | Severity | KEV | Published | Description |
|---|---|---|---|---|
|
CVE-2026-21513
KEV
MSHTML Framework Security Feature Bypass Vulnerability |
HIGH 8.8 | KEV | MSHTML Framework Security Feature Bypass Vulnerability | |
|
CVE-2026-21510
KEV
Windows Shell Security Feature Bypass Vulnerability |
HIGH 8.8 | KEV | Windows Shell Security Feature Bypass Vulnerability | |
|
CVE-2026-21519
KEV
Desktop Window Manager Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Desktop Window Manager Elevation of Privilege Vulnerability | |
|
CVE-2026-21533
KEV
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Windows Remote Desktop Services Elevation of Privilege Vulnerability | |
|
CVE-2026-21525
KEV
Windows Remote Access Connection Manager Denial of Service Vulnerability |
MEDIUM 6.2 | KEV | Windows Remote Access Connection Manager Denial of Service Vulnerability | |
|
CVE-2026-21255
Windows Hyper-V Security Feature Bypass Vulnerability |
HIGH 8.8 | — | Windows Hyper-V Security Feature Bypass Vulnerability | |
|
CVE-2026-21236
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21251
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Cluster Client Failover (CCF) Elevation of Privilege Vulnerability | |
|
CVE-2026-21250
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21240
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21239
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-21238
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21232
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21231
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-21246
Windows Graphics Component Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Graphics Component Elevation of Privilege Vulnerability | |
|
CVE-2026-21243
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
HIGH 7.5 | — | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | |
|
CVE-2026-20846
GDI+ Denial of Service Vulnerability |
HIGH 7.5 | — | GDI+ Denial of Service Vulnerability | |
|
CVE-2026-21248
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21247
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21244
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21242
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Subsystem for Linux Elevation of Privilege Vulnerability | |
|
CVE-2026-21234
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | |
|
CVE-2026-21508
Windows Storage Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Storage Elevation of Privilege Vulnerability | |
|
CVE-2026-21253
Mailslot File System Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Mailslot File System Elevation of Privilege Vulnerability | |
|
CVE-2026-21241
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21237
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Subsystem for Linux Elevation of Privilege Vulnerability | |
|
CVE-2023-2804
Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo |
HIGH 6.5 | — | Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo | |
|
CVE-2026-21222
Windows Kernel Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Kernel Information Disclosure Vulnerability | |
|
CVE-2026-21249
Windows NTLM Spoofing Vulnerability |
HIGH 3.3 | — | Windows NTLM Spoofing Vulnerability |