cbcvebase.

Microsoft Windows 10 22H2 vulnerabilities

3,744 known vulnerabilities affecting microsoft/windows_10_22h2.

Total CVEs
3,744
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL123HIGH2686MEDIUM926LOW9

Vulnerabilities

Page 120 of 188
CVE-2026-58629P3HIGHCVSS 7.0fixed in 10.0.19045.75482026-07-14
CVE-2026-58629 [HIGH] CWE-416 CVE-2026-58629: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34347P3HIGHCVSS 7.0fixed in 10.0.19045.72912026-05-12
CVE-2026-34347 [HIGH] CWE-416 CVE-2026-34347: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58725P3HIGHCVSS 7.0fixed in 10.0.19045.64562025-10-14
CVE-2025-58725 [HIGH] CWE-122 CVE-2025-58725: Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96322P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-96322 [HIGH] CWE-416 CVE-2026-96322: Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privilege Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83752P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-83752 [HIGH] CWE-416 CVE-2026-83752: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87704P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-87704 [HIGH] CWE-416 CVE-2026-87704: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87715P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-87715 [HIGH] CWE-416 CVE-2026-87715: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87693P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-87693 [HIGH] CWE-416 CVE-2026-87693: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42984P3HIGHCVSS 7.0fixed in 10.0.19045.74172026-06-09
CVE-2026-42984 [HIGH] CWE-416 CVE-2026-42984: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97793P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-97793 [HIGH] CWE-306 CVE-2026-97793: Missing authentication for critical function in Windows Setup and Deployment allows an authorized at Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85372P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-85372 [HIGH] CWE-416 CVE-2026-85372: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85364P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-85364 [HIGH] CWE-416 CVE-2026-85364: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85361P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-85361 [HIGH] CWE-416 CVE-2026-85361: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87708P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-87708 [HIGH] CWE-416 CVE-2026-87708: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88124P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-88124 [HIGH] CWE-416 CVE-2026-88124: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96302P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-96302 [HIGH] CWE-416 CVE-2026-96302: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96305P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-96305 [HIGH] CWE-416 CVE-2026-96305: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96216P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-96216 [HIGH] CWE-416 CVE-2026-96216: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102211P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-102211 [HIGH] CWE-362 CVE-2026-102211: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96313P3HIGHCVSS 7.0fixed in 10.0.19045.78072026-10-13
CVE-2026-96313 [HIGH] CWE-306 CVE-2026-96313: Missing authentication for critical function in Windows Push Notifications allows an authorized atta Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows 10 22H2 vulnerabilities | cvebase