Microsoft Windows 10 22H2 vulnerabilities
3,765 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,765
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL126HIGH2699MEDIUM931LOW9
Vulnerabilities
Page 180 of 189
CVE-2026-72931P4MEDIUMCVSS 5.5fixed in 10.0.19045.77252026-09-08
CVE-2026-72931 [MEDIUM] CWE-772 CVE-2026-72931: Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SS
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
nvd
CVE-2025-21268P4MEDIUMCVSS 4.3fixed in 10.0.19045.53712025-01-14
CVE-2025-21268 [MEDIUM] CWE-41 CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2026-20834P4MEDIUMCVSS 4.6fixed in 10.0.19045.68092026-01-13
CVE-2026-20834 [MEDIUM] CWE-36 CVE-2026-20834: Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
nvd
CVE-2026-83582P4MEDIUMCVSS 4.7fixed in 10.0.19045.78072026-10-13
CVE-2026-83582 [MEDIUM] CWE-416 CVE-2026-83582: Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68849P4MEDIUMCVSS 4.7fixed in 10.0.19045.77252026-09-08
CVE-2026-68849 [MEDIUM] CWE-125 CVE-2026-68849: Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose inform
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83865P4MEDIUMCVSS 4.7fixed in 10.0.19045.78072026-10-13
CVE-2026-83865 [MEDIUM] CWE-23 CVE-2026-83865: Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform t
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-70195P4MEDIUMCVSS 4.7fixed in 10.0.19045.78072026-10-13
CVE-2026-70195 [MEDIUM] CWE-362 CVE-2026-70195: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69548P4MEDIUMCVSS 4.6fixed in 10.0.19045.77252026-09-08
CVE-2026-69548 [MEDIUM] CWE-122 CVE-2026-69548: Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-69792P4MEDIUMCVSS 4.7fixed in 10.0.19045.77252026-09-08
CVE-2026-69792 [MEDIUM] CWE-362 CVE-2026-69792: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2023-36908P4MEDIUMCVSS 6.5fixed in 10.0.19045.33242023-08-08
CVE-2023-36908 [MEDIUM] CWE-200 CVE-2023-36908: Windows Hyper-V Information Disclosure Vulnerability
Windows Hyper-V Information Disclosure Vulnerability
nvd
CVE-2024-38041P4MEDIUMCVSS 5.5fixed in 10.0.19045.46512024-07-09
CVE-2024-38041 [MEDIUM] CWE-200 CVE-2024-38041: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-28271P4MEDIUMCVSS 5.5fixed in 10.0.19045.28462023-04-11
CVE-2023-28271 [MEDIUM] CWE-200 CVE-2023-28271: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21321P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21321 [MEDIUM] CWE-532 CVE-2025-21321: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21320P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21320 [MEDIUM] CWE-532 CVE-2025-21320: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21318P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21318 [MEDIUM] CWE-532 CVE-2025-21318: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21319P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21319 [MEDIUM] CWE-532 CVE-2025-21319: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21316P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21316 [MEDIUM] CWE-532 CVE-2025-21316: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21317P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21317 [MEDIUM] CWE-532 CVE-2025-21317: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21323P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21323 [MEDIUM] CWE-532 CVE-2025-21323: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-27742P4MEDIUMCVSS 5.5fixed in 10.0.19045.57372025-04-08
CVE-2025-27742 [MEDIUM] CWE-125 CVE-2025-27742: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd