Microsoft Windows 10 22H2 vulnerabilities
3,735 known vulnerabilities affecting microsoft/windows_10_22h2.
Total CVEs
3,735
CISA KEV
78
actively exploited
Public exploits
46
Exploited in wild
89
Severity breakdown
CRITICAL123HIGH2682MEDIUM921LOW9
Vulnerabilities
Page 55 of 187
CVE-2023-38147P3HIGHCVSS 8.8fixed in 10.0.19045.34482023-09-12
CVE-2023-38147 [HIGH] CWE-122 CVE-2023-38147: Windows Miracast Wireless Display Remote Code Execution Vulnerability
Windows Miracast Wireless Display Remote Code Execution Vulnerability
nvd
CVE-2025-55692P3HIGHCVSS 7.8fixed in 10.0.19045.64562025-10-14
CVE-2025-55692 [HIGH] CWE-20 CVE-2025-55692: Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privil
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54098P3HIGHCVSS 7.8fixed in 10.0.19045.63322025-09-09
CVE-2025-54098 [HIGH] CWE-284 CVE-2025-54098: Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges local
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-20700P3HIGHCVSS 7.5fixed in 10.0.19045.39302024-01-09
CVE-2024-20700 [HIGH] CWE-362 CVE-2024-20700: Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2023-24947P3HIGHCVSS 8.8fixed in 10.0.19045.29652023-05-09
CVE-2023-24947 [HIGH] CWE-416 CVE-2023-24947: Windows Bluetooth Driver Remote Code Execution Vulnerability
Windows Bluetooth Driver Remote Code Execution Vulnerability
nvd
CVE-2025-59512P3HIGHCVSS 7.8fixed in 10.0.19045.65752025-11-11
CVE-2025-59512 [HIGH] CWE-284 CVE-2025-59512: Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attac
Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49105P3HIGHCVSS 8.4fixed in 10.0.19045.52472024-12-12
CVE-2024-49105 [HIGH] CWE-284 CVE-2024-49105: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2023-36697P3HIGHCVSS 8.0fixed in 10.0.19045.35702023-10-10
CVE-2023-36697 [HIGH] CWE-20 CVE-2023-36697: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36594P3HIGHCVSS 7.8fixed in 10.0.19041.35702023-10-10
CVE-2023-36594 [HIGH] CWE-843 CVE-2023-36594: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-20654P3HIGHCVSS 8.0fixed in 10.0.19045.39302024-01-09
CVE-2024-20654 [HIGH] CWE-190 CVE-2024-20654: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2025-59517P3HIGHCVSS 7.8fixed in 10.0.19045.66912025-12-09
CVE-2025-59517 [HIGH] CWE-284 CVE-2025-59517: Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privi
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96186P3HIGHCVSS 7.8fixed in 10.0.19045.78072026-10-13
CVE-2026-96186 [HIGH] CWE-502 CVE-2026-96186: Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacke
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54100P3HIGHCVSS 7.8fixed in 10.0.19045.66912025-12-09
CVE-2025-54100 [HIGH] CWE-77 CVE-2025-54100: Improper neutralization of special elements used in a command ('command injection') in Windows Power
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
nvd
CVE-2023-35297P3HIGHCVSS 8.1fixed in 10.0.19045.32082023-07-11
CVE-2023-35297 [HIGH] CWE-843 CVE-2023-35297: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2026-54128P3HIGHCVSS 8.4fixed in 10.0.19045.75482026-07-14
CVE-2026-54128 [HIGH] CWE-416 CVE-2026-54128: Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-27909P3HIGHCVSS 7.8fixed in 10.0.19045.71842026-04-14
CVE-2026-27909 [HIGH] CWE-416 CVE-2026-27909: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28283P3HIGHCVSS 8.1fixed in 10.0.19045.29652023-05-09
CVE-2023-28283 [HIGH] CWE-591 CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-81354P3HIGHCVSS 8.2fixed in 10.0.19045.77252026-09-08
CVE-2026-81354 [HIGH] CWE-122 CVE-2026-81354: Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69332P3HIGHCVSS 8.0fixed in 10.0.19045.77252026-09-08
CVE-2026-69332 [HIGH] CWE-125 CVE-2026-69332: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69505P3HIGHCVSS 8.0fixed in 10.0.19045.77252026-09-08
CVE-2026-69505 [HIGH] CWE-125 CVE-2026-69505: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd