Microsoft Windows 10 22H2 vulnerabilities
3,744 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,744
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL123HIGH2686MEDIUM926LOW9
Vulnerabilities
Page 131 of 188
CVE-2026-57976P3MEDIUMCVSS 6.5fixed in 10.0.19045.75482026-07-14
CVE-2026-57976 [MEDIUM] CWE-476 CVE-2026-57976: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-56168P3MEDIUMCVSS 6.5fixed in 10.0.19045.75482026-07-14
CVE-2026-56168 [MEDIUM] CWE-476 CVE-2026-56168: Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a
Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2025-62473P3MEDIUMCVSS 6.5fixed in 10.0.19045.66912025-12-09
CVE-2025-62473 [MEDIUM] CWE-126 CVE-2025-62473: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-102199P3MEDIUMCVSS 6.5fixed in 10.0.19045.78072026-10-13
CVE-2026-102199 [MEDIUM] CWE-121 CVE-2026-102199: Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-78453P3MEDIUMCVSS 6.5fixed in 10.0.19045.77252026-09-08
CVE-2026-78453 [MEDIUM] CWE-191 CVE-2026-78453: Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unautho
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-61921P3MEDIUMCVSS 6.5fixed in 10.0.19045.76632026-08-11
CVE-2026-61921 [MEDIUM] CWE-125 CVE-2026-61921: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-55003P3MEDIUMCVSS 6.5fixed in 10.0.19045.75482026-07-14
CVE-2026-55003 [MEDIUM] CWE-908 CVE-2026-55003: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-50376P3MEDIUMCVSS 6.5fixed in 10.0.19045.75482026-07-14
CVE-2026-50376 [MEDIUM] CWE-908 CVE-2026-50376: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58546P3MEDIUMCVSS 6.5fixed in 10.0.19045.75482026-07-14
CVE-2026-58546 [MEDIUM] CWE-908 CVE-2026-58546: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-69635P3MEDIUMCVSS 6.6fixed in 10.0.19045.78072026-10-13
CVE-2026-69635 [MEDIUM] CWE-122 CVE-2026-69635: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2024-21433P3HIGHCVSS 7.0fixed in 10.0.19045.41702024-03-12
CVE-2024-21433 [HIGH] CWE-367 CVE-2024-21433: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2023-38159P3HIGHCVSS 7.0fixed in 10.0.19045.35702023-10-10
CVE-2023-38159 [HIGH] CWE-591 CVE-2023-38159: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2025-21230P3HIGHCVSS 7.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21230 [HIGH] CWE-20 CVE-2025-21230: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-38126P3HIGHCVSS 7.5fixed in 10.0.19045.47802024-08-13
CVE-2024-38126 [HIGH] CWE-476 CVE-2024-38126: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2025-21251P3HIGHCVSS 7.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21251 [HIGH] CWE-400 CVE-2025-21251: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-38132P3HIGHCVSS 7.5fixed in 10.0.19045.47802024-08-13
CVE-2024-38132 [HIGH] CWE-125 CVE-2024-38132: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2025-21289P3HIGHCVSS 7.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21289 [HIGH] CWE-400 CVE-2025-21289: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21290P3HIGHCVSS 7.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21290 [HIGH] CWE-400 CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21270P3HIGHCVSS 7.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21270 [HIGH] CWE-400 CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2024-43565P3HIGHCVSS 7.5fixed in 10.0.19045.50112024-10-08
CVE-2024-43565 [HIGH] CWE-125 CVE-2024-43565: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd