Microsoft Windows 10 22H2 vulnerabilities

CVE-2026-85870 [HIGH] CWE-122 CVE-2026-85870: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85791 [HIGH] CWE-122 CVE-2026-85791: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-109453 [HIGH] CWE-122 CVE-2026-109453: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-103555 [HIGH] CWE-122 CVE-2026-103555: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69492 [HIGH] CWE-122 CVE-2026-69492: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69563 [HIGH] CWE-122 CVE-2026-69563: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85365 [HIGH] CWE-122 CVE-2026-85365: Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-59116 [MEDIUM] CWE-327 CVE-2026-59116: Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized at Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-57982 [MEDIUM] CWE-908 CVE-2026-57982: Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information o Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.

CVE-2026-97842 [MEDIUM] CWE-125 CVE-2026-97842: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-87714 [MEDIUM] CWE-862 CVE-2026-87714: Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a ne Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-50302 [MEDIUM] CWE-295 CVE-2026-50302: Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.

CVE-2023-35383 [HIGH] CWE-190 CVE-2023-35383: Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2023-36567 [HIGH] CWE-908 CVE-2023-36567: Windows Deployment Services Information Disclosure Vulnerability Windows Deployment Services Information Disclosure Vulnerability

CVE-2023-36906 [HIGH] CWE-170 CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2023-21817 [HIGH] CWE-287 CVE-2023-21817: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability

CVE-2023-21822 [HIGH] CWE-416 CVE-2023-21822: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-21691 [HIGH] CWE-125 CVE-2023-21691: Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVE-2023-36705 [HIGH] CWE-59 CVE-2023-36705: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability