Windows · Fixed build
10.0.28000.1575
MSRC advisory26 CVEs fixed by this build, deployed across 1 Windows SKUs.
- Published on
- 2025-10-14
- SKUs covered
- 1
- CVEs fixed
- 26
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
- CISA KEV
- 5
- Critical
- 1
- High
- 24
- NVD pending
- 0
CVEs fixed by this build
| CVE | Severity | KEV | Published | Description |
|---|---|---|---|---|
|
CVE-2026-21513
KEV
MSHTML Framework Security Feature Bypass Vulnerability |
HIGH 8.8 | KEV | MSHTML Framework Security Feature Bypass Vulnerability | |
|
CVE-2026-21510
KEV
Windows Shell Security Feature Bypass Vulnerability |
HIGH 8.8 | KEV | Windows Shell Security Feature Bypass Vulnerability | |
|
CVE-2026-21519
KEV
Desktop Window Manager Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Desktop Window Manager Elevation of Privilege Vulnerability | |
|
CVE-2026-21533
KEV
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
HIGH 7.8 | KEV | Windows Remote Desktop Services Elevation of Privilege Vulnerability | |
|
CVE-2026-21525
KEV
Windows Remote Access Connection Manager Denial of Service Vulnerability |
MEDIUM 6.2 | KEV | Windows Remote Access Connection Manager Denial of Service Vulnerability | |
|
CVE-2026-21255
Windows Hyper-V Security Feature Bypass Vulnerability |
HIGH 8.8 | — | Windows Hyper-V Security Feature Bypass Vulnerability | |
|
CVE-2026-21236
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21250
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21245
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-21240
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21238
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21232
Windows HTTP.sys Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows HTTP.sys Elevation of Privilege Vulnerability | |
|
CVE-2026-21231
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-20846
GDI+ Denial of Service Vulnerability |
HIGH 7.5 | — | GDI+ Denial of Service Vulnerability | |
|
CVE-2026-21248
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21247
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21235
Windows Graphics Component Elevation of Privilege Vulnerability |
HIGH 7.3 | — | Windows Graphics Component Elevation of Privilege Vulnerability | |
|
CVE-2026-21244
Windows Hyper-V Remote Code Execution Vulnerability |
HIGH 7.3 | — | Windows Hyper-V Remote Code Execution Vulnerability | |
|
CVE-2026-21242
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Subsystem for Linux Elevation of Privilege Vulnerability | |
|
CVE-2026-21234
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | |
|
CVE-2026-21508
Windows Storage Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Storage Elevation of Privilege Vulnerability | |
|
CVE-2026-21253
Mailslot File System Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Mailslot File System Elevation of Privilege Vulnerability | |
|
CVE-2026-21241
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
|
CVE-2026-21237
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Subsystem for Linux Elevation of Privilege Vulnerability | |
|
CVE-2025-2884
Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation |
CRITICAL 5.3 | — | Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation | |
|
CVE-2026-21249
Windows NTLM Spoofing Vulnerability |
HIGH 3.3 | — | Windows NTLM Spoofing Vulnerability |