Microsoft Windows 10 22H2 vulnerabilities
3,744 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,744
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL123HIGH2686MEDIUM926LOW9
Vulnerabilities
Page 110 of 188
CVE-2023-35343P3HIGHCVSS 7.8fixed in 10.0.19045.32082023-07-11
CVE-2023-35343 [HIGH] CWE-426 CVE-2023-35343: Windows Geolocation Service Remote Code Execution Vulnerability
Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2023-24905P3HIGHCVSS 7.8fixed in 10.0.19045.29652023-05-09
CVE-2023-24905 [HIGH] CWE-284 CVE-2023-24905: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2023-35313P3HIGHCVSS 7.8fixed in 10.0.19045.32082023-07-11
CVE-2023-35313 [HIGH] CWE-416 CVE-2023-35313: Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
nvd
CVE-2024-21354P3HIGHCVSS 7.8fixed in 10.0.19045.40462024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8fixed in 10.0.19045.36932023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd
CVE-2023-36408P3HIGHCVSS 7.8fixed in 10.0.19045.36932023-11-14
CVE-2023-36408 [HIGH] CWE-122 CVE-2023-36408: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2024-29052P3HIGHCVSS 7.8fixed in 10.0.19045.42912024-04-09
CVE-2024-29052 [HIGH] CWE-269 CVE-2024-29052: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2023-35342P3HIGHCVSS 7.8fixed in 10.0.19045.32082023-07-11
CVE-2023-35342 [HIGH] CWE-59 CVE-2023-35342: Windows Image Acquisition Elevation of Privilege Vulnerability
Windows Image Acquisition Elevation of Privilege Vulnerability
nvd
CVE-2023-35312P3HIGHCVSS 7.8fixed in 10.0.19045.32082023-07-11
CVE-2023-35312 [HIGH] CWE-190 CVE-2023-35312: Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
nvd
CVE-2023-35320P3HIGHCVSS 7.8fixed in 10.0.19045.32082023-07-11
CVE-2023-35320 [HIGH] CWE-59 CVE-2023-35320: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
nvd
CVE-2025-54894P3HIGHCVSS 7.8fixed in 10.0.19045.63322025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2023-24946P3HIGHCVSS 7.8fixed in 10.0.19045.29652023-05-09
CVE-2023-24946 [HIGH] CWE-591 CVE-2023-24946: Windows Backup Service Elevation of Privilege Vulnerability
Windows Backup Service Elevation of Privilege Vulnerability
nvd
CVE-2026-20816P3HIGHCVSS 7.0fixed in 10.0.19045.68092026-01-13
CVE-2026-20816 [HIGH] CWE-367 CVE-2026-20816: Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-30031P3HIGHCVSS 7.8fixed in 10.0.19045.44122024-05-14
CVE-2024-30031 [HIGH] CWE-416 CVE-2024-30031: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
nvd
CVE-2023-23417P3HIGHCVSS 7.8fixed in 10.0.19045.27282023-03-14
CVE-2023-23417 [HIGH] CWE-190 CVE-2023-23417: Windows Partition Management Driver Elevation of Privilege Vulnerability
Windows Partition Management Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-28236P3HIGHCVSS 7.8fixed in 10.0.19045.28462023-04-11
CVE-2023-28236 [HIGH] CWE-591 CVE-2023-28236: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-58720P3HIGHCVSS 7.8fixed in 10.0.19045.64562025-10-14
CVE-2025-58720 [HIGH] CWE-1240 CVE-2025-58720: Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allow
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
nvd
CVE-2024-26232P3HIGHCVSS 7.3fixed in 10.0.19045.42912024-04-09
CVE-2024-26232 [HIGH] CWE-843 CVE-2024-26232: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-43581P3HIGHCVSS 7.1fixed in 10.0.19045.50112024-10-08
CVE-2024-43581 [HIGH] CWE-73 CVE-2024-43581: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
nvd
CVE-2025-27491P3HIGHCVSS 7.1fixed in 10.0.19045.57372025-04-08
CVE-2025-27491 [HIGH] CWE-416 CVE-2025-27491: Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
nvd