Microsoft Windows 10 22H2 vulnerabilities
3,765 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,765
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL126HIGH2699MEDIUM931LOW9
Vulnerabilities
Page 167 of 189
CVE-2026-24282P4MEDIUMCVSS 5.5fixed in 10.0.19045.70582026-03-10
CVE-2026-24282 [MEDIUM] CWE-125 CVE-2026-24282: Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose informa
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70208P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-70208 [MEDIUM] CWE-125 CVE-2026-70208: Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96850P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-96850 [MEDIUM] CWE-170 CVE-2026-96850: Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacke
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70270P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-70270 [MEDIUM] CWE-822 CVE-2026-70270: Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized a
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96321P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-96321 [MEDIUM] CWE-125 CVE-2026-96321: Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose inform
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83884P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-83884 [MEDIUM] CWE-125 CVE-2026-83884: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83892P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-83892 [MEDIUM] CWE-125 CVE-2026-83892: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70128P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-70128 [MEDIUM] CWE-125 CVE-2026-70128: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83887P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-83887 [MEDIUM] CWE-125 CVE-2026-83887: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83898P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-83898 [MEDIUM] CWE-125 CVE-2026-83898: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83904P4MEDIUMCVSS 5.5fixed in 10.0.19045.78072026-10-13
CVE-2026-83904 [MEDIUM] CWE-125 CVE-2026-83904: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69318P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69318 [MEDIUM] CWE-125 CVE-2026-69318: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69627P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69627 [MEDIUM] CWE-125 CVE-2026-69627: Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disc
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69527P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69527 [MEDIUM] CWE-125 CVE-2026-69527: Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclos
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70290P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-70290 [MEDIUM] CWE-908 CVE-2026-70290: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68881P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-68881 [MEDIUM] CWE-125 CVE-2026-68881: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69367P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69367 [MEDIUM] CWE-125 CVE-2026-69367: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69308P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69308 [MEDIUM] CWE-125 CVE-2026-69308: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69770P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-69770 [MEDIUM] CWE-908 CVE-2026-69770: Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose inf
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-72945P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-72945 [MEDIUM] CWE-908 CVE-2026-72945: Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose in
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
nvd