Microsoft Windows 10 22H2 vulnerabilities
3,765 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,765
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL126HIGH2699MEDIUM931LOW9
Vulnerabilities
Page 187 of 189
CVE-2026-78508P4MEDIUMCVSS 4.6fixed in 10.0.19045.77252026-09-08
CVE-2026-78508 [MEDIUM] CWE-125 CVE-2026-78508: Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-69381P4MEDIUMCVSS 4.6fixed in 10.0.19045.77252026-09-08
CVE-2026-69381 [MEDIUM] CWE-125 CVE-2026-69381: Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-78452P4MEDIUMCVSS 4.6fixed in 10.0.19045.77252026-09-08
CVE-2026-78452 [MEDIUM] CWE-125 CVE-2026-78452: Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to di
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-49794P4MEDIUMCVSS 4.6fixed in 10.0.19045.75482026-07-14
CVE-2026-49794 [MEDIUM] CWE-125 CVE-2026-49794: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2025-21278P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21278 [MEDIUM] CWE-362 CVE-2025-21278: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
nvd
CVE-2025-59198P4MEDIUMCVSS 5.0fixed in 10.0.19045.64562025-10-14
CVE-2025-59198 [MEDIUM] CWE-20 CVE-2025-59198: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to den
Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
nvd
CVE-2023-36722P4MEDIUMCVSS 4.4fixed in 10.0.19045.35702023-10-10
CVE-2023-36722 [MEDIUM] CWE-284 CVE-2023-36722: Active Directory Domain Services Information Disclosure Vulnerability
Active Directory Domain Services Information Disclosure Vulnerability
nvd
CVE-2024-30071P4MEDIUMCVSS 4.7fixed in 10.0.19045.46512024-07-09
CVE-2024-30071 [MEDIUM] CWE-126 CVE-2024-30071: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2024-30069P4MEDIUMCVSS 4.7fixed in 10.0.19045.45292024-06-11
CVE-2024-30069 [MEDIUM] CWE-126 CVE-2024-30069: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2026-20828P4MEDIUMCVSS 4.6fixed in 10.0.19045.68092026-01-13
CVE-2026-20828 [MEDIUM] CWE-125 CVE-2026-20828: Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to d
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2023-36698P4MEDIUMCVSS 4.4fixed in 10.0.19045.35702023-10-10
CVE-2023-36698 [MEDIUM] CWE-362 CVE-2023-36698: Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability
nvd
CVE-2026-78516P4MEDIUMCVSS 4.3fixed in 10.0.19045.77252026-09-08
CVE-2026-78516 [MEDIUM] CWE-126 CVE-2026-78516: Insertion of sensitive information into externally-accessible file or directory in Windows Storage a
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
nvd
CVE-2026-78455P4MEDIUMCVSS 4.3fixed in 10.0.19045.77252026-09-08
CVE-2026-78455 [MEDIUM] CWE-125 CVE-2026-78455: Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical a
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2025-49760P4LOWCVSS 3.5fixed in 10.0.19045.60932025-07-08
CVE-2025-49760 [LOW] CWE-73 CVE-2025-49760: External control of file name or path in Windows Storage allows an authorized attacker to perform sp
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2025-21274P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21274 [MEDIUM] CWE-59 CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability
Windows Event Tracing Denial of Service Vulnerability
nvd
CVE-2024-26172P4MEDIUMCVSS 5.5fixed in 10.0.19045.42912024-04-09
CVE-2024-26172 [MEDIUM] CWE-125 CVE-2024-26172: Windows DWM Core Library Information Disclosure Vulnerability
Windows DWM Core Library Information Disclosure Vulnerability
nvd
CVE-2025-21284P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21284 [MEDIUM] CWE-20 CVE-2025-21284: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2025-21280P4MEDIUMCVSS 5.5fixed in 10.0.19045.53712025-01-14
CVE-2025-21280 [MEDIUM] CWE-20 CVE-2025-21280: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2024-26220P4MEDIUMCVSS 5.0fixed in 10.0.19045.42912024-04-09
CVE-2024-26220 [MEDIUM] CWE-908 CVE-2024-26220: Windows Mobile Hotspot Information Disclosure Vulnerability
Windows Mobile Hotspot Information Disclosure Vulnerability
nvd
CVE-2023-32019P4MEDIUMCVSS 4.7fixed in 10.0.19045.30872023-06-14
CVE-2023-32019 [MEDIUM] CWE-668 CVE-2023-32019: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd