Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 107 of 202
CVE-2026-69337P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69337 [HIGH] CWE-415 CVE-2026-69337: Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-68835P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-68835 [HIGH] CWE-416 CVE-2026-68835: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69358P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69358 [HIGH] CWE-908 CVE-2026-69358: Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69364P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69364 [HIGH] CWE-362 CVE-2026-69364: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-85856P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85856 [HIGH] CWE-122 CVE-2026-85856: Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
nvd
CVE-2026-83580P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83580 [HIGH] CWE-122 CVE-2026-83580: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-100201P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-100201 [HIGH] CWE-122 CVE-2026-100201: Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-100203P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-100203 [HIGH] CWE-122 CVE-2026-100203: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83724P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83724 [HIGH] CWE-122 CVE-2026-83724: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-41108P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-41108 [HIGH] CWE-122 CVE-2026-41108: Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privile
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83921P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83921 [HIGH] CWE-122 CVE-2026-83921: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69970P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-69970 [HIGH] CWE-122 CVE-2026-69970: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68884P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-68884 [HIGH] CWE-122 CVE-2026-68884: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68897P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-68897 [HIGH] CWE-122 CVE-2026-68897: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70568P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-70568 [HIGH] CWE-122 CVE-2026-70568: Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to ele
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69621P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69621 [HIGH] CWE-122 CVE-2026-69621: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69394P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69394 [HIGH] CWE-122 CVE-2026-69394: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62753P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-62753 [HIGH] CWE-122 CVE-2026-62753: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83680P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83680 [HIGH] CWE-122 CVE-2026-83680: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45653P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd