Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 102 of 202
CVE-2025-62565P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.66912025-12-09
CVE-2025-62565 [HIGH] CWE-416 CVE-2025-62565: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50364P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50364 [HIGH] CWE-59 CVE-2026-50364: Improper link resolution before file access ('link following') in Windows Server Backup allows an au
Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32149P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32149 [HIGH] CWE-20 CVE-2026-32149: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-108399P3HIGHCVSS 7.2≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-108399 [HIGH] CWE-122 CVE-2026-108399: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69396P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69396 [HIGH] CWE-416 CVE-2026-69396: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69296P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69296 [HIGH] CWE-416 CVE-2026-69296: Use after free in Windows Device Association Service allows an authorized attacker to elevate privil
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69357P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69357 [HIGH] CWE-416 CVE-2026-69357: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69274P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69274 [HIGH] CWE-416 CVE-2026-69274: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69314P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69314 [HIGH] CWE-416 CVE-2026-69314: Use after free in Windows Device Association Broker service allows an authorized attacker to elevate
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69460P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69460 [HIGH] CWE-416 CVE-2026-69460: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-83911P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83911 [HIGH] CWE-122 CVE-2026-83911: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-100225P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-100225 [HIGH] CWE-122 CVE-2026-100225: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-100216P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-100216 [HIGH] CWE-121 CVE-2026-100216: Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges l
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70573P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-70573 [HIGH] CWE-20 CVE-2026-70573: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83827P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83827 [HIGH] CWE-122 CVE-2026-83827: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83708P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83708 [HIGH] CWE-121 CVE-2026-83708: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70578P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-70578 [HIGH] CWE-122 CVE-2026-70578: Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69468P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69468 [HIGH] CWE-122 CVE-2026-69468: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50472P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-50472 [HIGH] CWE-122 CVE-2026-50472: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26635P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-26635 [MEDIUM] CWE-1390 CVE-2025-26635: Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
nvd