Windows 7 (extended support only): 50 vulnerabilities: 14 critical and 36 important
CVE-2021-27095 -- Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-28315 -- Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-28329 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28330 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28331 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28332 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28333 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28334 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28335 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28336 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28337 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28338 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28339 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28343 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
Windows 8.1: 5 5vulnerabilities: 14 critical and 41 important
same as Windows 7
Windows 10 version 1903 and 1909: 77 vulnerabilities: 14 critical and 62 important and 1 moderate
same as Windows 7
Windows 10 version 2004 and 20H2: 79 vulnerabilities, 14 critical and 64 important and 1 moderate
same as Windows 7
Windows Server products

Windows Server 2008 R2 (extended support only): 47 vulnerabilities: 14 critical and 33 important
CVE-2021-27095 -- Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-28315 -- Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-28329 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28330 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28331 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28332 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28333 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28334 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28335 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28336 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28337 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28338 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28339 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28343 -- Remote Procedure Call Runtime Remote Code Execution Vulnerability
Windows Server 2012 R2: 55 vulnerabilities: 14 critical and 41 important
same as Windows Sever 2008 R2
Windows Server 2016: 63 vulnerabilities: 14 critical and 49 important.
same as Windows Sever 2008 R2
Windows Server 2019: 77 vulnerabilities: 14 critical and 62 important and 1 moderate
same as Windows Sever 2008 R2
Windows Security Updates
Windows 7 SP1 and Windows Server 2008 R2

Monthly Rollup: KB5001335
Security-only:KB5001392
Updates and improvements:

Time Zone change for Volgograd, Russia and The Republic of South Sudan.
Removed support for the RemoteFX vGPU feature. Microsoft suggests to use secure vGPU alternatives. (Monthly Rollup only)
Addressed an issue that prevents users from specifying up to 255 columns when using the Jet Text installable indexed sequential access method (IISAM) format. (Monthly Rollup only)
Fixed a Windows Backup Event ID reporting issue. (Monthly Rollup only)
Fixed security issues.
Windows 8.1 and Windows Server 2012 R2

Monthly Rollup: KB5001382
Security-only: KB5001393
Updates and improvements:

Time Zone change for Volgograd, Russia and The Republic of South Sudan.
Fixed security issues.
Removed support for the RemoteFX vGPU feature. Microsoft suggests to use secure vGPU alternatives. (Monthly Rollup only)
Addressed an issue that prevents users from specifying up to 255 columns when using the Jet Text installable indexed sequential access method (IISAM) format. (Monthly Rollup only)
Windows 10 version 1909

Support Page: KB5001337
Updates and improvements:

Fixed a "potential elevation of privilege vulnerability in the way Azure Active Directory web sign-in allows arbitrary browsing". See Policy CSP Authentication for more information.
Fixed an issue in "which a principal in a trusted MIT realm fails to obtain a Kerberos service ticket from Active Directory domain controllers (DC)".
Removed support for the RemoteFX vGPU feature. Microsoft suggests to use secure vGPU alternatives. (Monthly Rollup only)
Security updates.
Windows 10 version 2004 and 20H2

Support Page: KB5001330
Updates and improvements:

same as Windows 10 version 1909
Other security updates

2021-04 Cumulative Update for Windows 10 Version 1507 (KB5001340)

2021-04 Cumulative Update for Windows 10 Version 1803 (KB5001339)

2021-04 Cumulative Update for Windows 10 Version 1809 (KB5001342)

2021-04 Security Only Quality Update for Windows Server 2008 (KB5001332)

2021-04 Security Monthly Quality Rollup for Windows Server 2008 (KB5001389)

2021-04 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012 (KB5001383)

2021-04 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012 (KB5001387)

2021-04 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607 (KB5001347)

Operating System Distribution
Windows 7 (extended support only): 11 vulnerabilities: 1 critical and 10 important
Hyper-V Remote Code Execution Vulnerability - CVE-2021-28476
Windows 8.1: 12 vulnerabilities: 2 critical and 12 important
Hyper-V Remote Code Execution Vulnerability - CVE-2021-28476
OLE Automation Remote Code Execution Vulnerability -- CVE-2021-31194
Windows 10 version 1903 and 1909: 16 vulnerabilities: 2 critical and 14 important
same as Windows 8.1
Windows 10 version 2004 and 20H2: 24 vulnerabilities, 3 critical and 21 important
Hyper-V Remote Code Execution Vulnerability - CVE-2021-28476
OLE Automation Remote Code Execution Vulnerability -- CVE-2021-31194
HTTP Protocol Stack Remote Code Execution Vulnerability -- CVE-2021-31166
Windows Server products

Windows Server 2008 R2 (extended support only): 10 vulnerabilities: 1 critical and 9 important
Hyper-V Remote Code Execution Vulnerability -- CVE-2021-28476
Windows Server 2012 R2: 12 vulnerabilities: 2 critical and 12 important
Hyper-V Remote Code Execution Vulnerability - CVE-2021-28476
OLE Automation Remote Code Execution Vulnerability -- CVE-2021-31194
Windows Server 2016: 12 vulnerabilities: 2 critical and 12 important.
same as Windows Server 2021 R2
Windows Server 2019: 16 vulnerabilities: 2 critical and 14 important
same as Windows Sever 2008 R2
Windows Security Updates
Windows 7 SP1 and Windows Server 2008 R2

Monthly Rollup: KB5003233
Security-Only: KB5003228
Updates and improvements:

Fixed an issue in the Server Message Block (SMB) protocol causing frequent crashes with error 0xA on Windows Server 2008 R2 SP1
Security updates
Windows 8.1 and Windows Server 2012 R2

Monthly Rollup: KB5003209
Security-only: KB5003220
Updates and improvements:

Security updates
Windows 10 version 1909

Support Page: KB5003169
Updates and improvements:

Fixed an issue that could make scroll bar controls appear blank on the screen.
Security updates.
Windows 10 version 2004 and 20H2

Support Page: KB5003173
Updates and improvements:

Security updates
Other security updates

2021-05 Cumulative Security Update for Internet Explorer (KB5003165)

Windows 7 (extended support only): 14 vulnerabilities: 2 critical and 12 important
Windows MSHTML Platform Remote Code Execution Vulnerability - CVE-2021-33742
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-31959
Windows 8.1: 19 vulnerabilities: 2 critical and 12 important
same critical as Windows 7
Windows 10 version 1903 and 1909: 24 vulnerabilities: 2 critical and 22 important
same critical as Windows 7
Windows 10 version 2004, 20H2 and 21H1 : 25 vulnerabilities, 2 critical and 23 important
same critical as Windows 7
Windows Server products

Windows Server 2008 R2 (extended support only): 12 vulnerabilities: 1 critical and 11 important
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-33742
Windows Server 2012 R2: 19 vulnerabilities: 2 critical and 17 important
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-31959
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-33742
Windows Server 2016: 20 vulnerabilities: 2 critical and 18 important.
same as Windows Server 2012 R2
Windows Server 2019: 24 vulnerabilities: 2 critical and 22 important
same as Windows Server 2012 R2

https://www.ghacks.net/2021/06/08/microsoft-windows-security-updates-june-2021-overview/

https://www.ghacks.net/2021/07/13/microsoft-windows-security-updates-july-2021-overview/

Windows 7 (extended support only): 30 vulnerabilities: 3 critical and 27 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
Windows 8.1: 39 vulnerabilities: 3 critical and 36 important
same as Windows 7
Windows 10 version 1903 and 1909: 67 vulnerabilities: 5 critical and 62 important
same as Windows 7, plus
Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34503
Windows 10 version 2004, 20H2 and 21H1 : 68 vulnerabilities, 4 critical and 64 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
Windows Server products

Windows Server 2008 R2 (extended support only): 37 vulnerabilities: 1 critical and 11 important
Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
Windows Server 2012 R2: 50 vulnerabilities: 4 critical and 46 important
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
Windows Server 2016: 60 vulnerabilities: 6 critical and 54 important.
same as Windows Server 2021 R2 plus
Windows Kernel Remote Code Execution Vulnerability -- CVE-2021-34458
Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34439
Windows Server 2019: 77 vulnerabilities: 2 critical and 22 important
Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34439
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
Windows Kernel Remote Code Execution Vulnerability -- CVE-2021-34458
Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
Windows Media Remote Code Execution Vulnerability -- CVE-2021-33740
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527

Windows 7 (extended support only): 12 vulnerabilities: 4 critical and 8 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows 8.1: 18 vulnerabilities: 5 critical and 13 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability -- CVE-2021-26432
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows 10 version 1903 and 1909: 23 vulnerabilities: 7 critical and 16 important
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34534
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows Graphics Component Remote Code Execution Vulnerability -- CVE-2021-34530
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability -- CVE-2021-26432
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Windows 10 version 2004, 20H2 and 21H1 : 24 vulnerabilities, 7 critical and 17 important
same as Windows 10 version 1909.
Windows Server products

Windows Server 2008 R2 (extended support only): 13 vulnerabilities: 4 critical and 9 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows Server 2012 R2: 19 vulnerabilities: 5 critical and 14 important
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability -- CVE-2021-26432
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows Server 2016: 23 vulnerabilities: 7 critical and 16 important
Windows Graphics Component Remote Code Execution Vulnerability -- CVE-2021-34530
Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34480
Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34534
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-34535
Windows TCP/IP Remote Code Execution Vulnerability -- CVE-2021-26424
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability -- CVE-2021-26432
Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-36936
Windows Server 2019: 25 vulnerabilities: 7 critical and 18 important
same as Windows Server 2016

Operating System Distribution

Windows 7 (extended support only): 11 vulnerabilities: 1 critical and 10 important

Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666

Windows 8.1: 13 vulnerabilities: 1 critical and 12 important
Same as Windows 7.

Windows 10 version 1909: 22 vulnerabilities: 3 critical and 19 important
Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability -- CVE-2021-26443
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666

Windows 10 version 2004, 20H2 and 21H1 : 24 vulnerabilities, 3 critical and 21 important
same as Windows 10 version 1909

Windows 11: 21 vulnerabilities, 3 critical and 18 important
same as Windows 10 version 1909
Windows Server products

Windows Server 2008 R2 (extended support only): 15 vulnerabilities: 1 critical and 14 important
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
Windows Server 2012 R2: 17 vulnerabilities: 1 critical and 16 important
same as Windows Server 2008 R2.
Windows Server 2016: 24 vulnerabilities: 2 critical and 22 important
Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
Windows Server 2019: 27 vulnerabilities: 2 critical and 25 important
same as Windows Server 2016
Windows Server 2022: 26 vulnerabilities: 3 critical and 23 important
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability -- CVE-2021-26443
Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279