Microsoft Windows 10 22H2 vulnerabilities

CVE-2025-49665 [HIGH] CWE-362 CVE-2025-49665: Concurrent execution using shared resource with improper synchronization ('race condition') in Works Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-85338 [HIGH] CWE-125 CVE-2026-85338: Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 [HIGH] CWE-125 CVE-2026-88070: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2025-49733 [HIGH] CWE-416 CVE-2025-49733: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2025-49725 [HIGH] CWE-416 CVE-2025-49725: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVE-2026-83670 [HIGH] CWE-125 CVE-2026-83670: Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disc Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

CVE-2025-53768 [HIGH] CWE-362 CVE-2025-53768: Use after free in Xbox allows an authorized attacker to elevate privileges locally. Use after free in Xbox allows an authorized attacker to elevate privileges locally.

CVE-2026-96918 [HIGH] CWE-863 CVE-2026-96918: Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83837 [HIGH] CWE-441 CVE-2026-83837: Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-85796 [HIGH] CWE-121 CVE-2026-85796: Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88194 [HIGH] CWE-125 CVE-2026-88194: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85842 [HIGH] CWE-134 CVE-2026-85842: Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacke Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-88182 [HIGH] CWE-416 CVE-2026-88182: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88181 [HIGH] CWE-125 CVE-2026-88181: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85829 [HIGH] CWE-415 CVE-2026-85829: Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88188 [HIGH] CWE-125 CVE-2026-88188: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-96928 [HIGH] CWE-125 CVE-2026-96928: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96862 [HIGH] CWE-125 CVE-2026-96862: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-88179 [HIGH] CWE-125 CVE-2026-88179: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.