Microsoft Windows 10 22H2 vulnerabilities

CVE-2026-83658 [MEDIUM] CWE-862 CVE-2026-83658: Improper access control in Windows Error Reporting allows an authorized attacker to disclose informa Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83764 [MEDIUM] CWE-863 CVE-2026-83764: Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-85938 [MEDIUM] CWE-862 CVE-2026-85938: Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to discl Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-32212 [MEDIUM] CWE-59 CVE-2026-32212: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2026-69531 [MEDIUM] CWE-441 CVE-2026-69531: Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorize Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

CVE-2026-85320 [MEDIUM] CWE-908 CVE-2026-85320: Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-88162 [MEDIUM] CWE-863 CVE-2026-88162: Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVE-2026-58638 [MEDIUM] CWE-325 CVE-2026-58638: Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2023-28226 [MEDIUM] CWE-347 CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability Windows Enroll Engine Security Feature Bypass Vulnerability

CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2026-24297 [MEDIUM] CWE-362 CVE-2026-24297: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.

CVE-2023-36909 [MEDIUM] CWE-191 CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2026-83656 [MEDIUM] CWE-306 CVE-2026-83656: Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2025-21226 [MEDIUM] CWE-125 CVE-2025-21226: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21260 [MEDIUM] CWE-125 CVE-2025-21260: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21256 [MEDIUM] CWE-122 CVE-2025-21256: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability