Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 108 of 202
CVE-2026-85828P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85828 [HIGH] CWE-122 CVE-2026-85828: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85834P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85834 [HIGH] CWE-122 CVE-2026-85834: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83871P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83871 [HIGH] CWE-122 CVE-2026-83871: Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84014P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85827P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83683P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83683 [MEDIUM] CWE-36 CVE-2026-83683: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-20812P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2026-85840P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-88137P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97828P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-36596P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36596 [HIGH] CWE-822 CVE-2023-36596: Remote Procedure Call Information Disclosure Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
nvd
CVE-2025-21220P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2023-36438P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36438 [HIGH] CVE-2023-36438: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-36905P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-36905 [HIGH] CWE-125 CVE-2023-36905: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
nvd
CVE-2023-36393P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.36932023-11-14
CVE-2023-36393 [HIGH] CWE-426 CVE-2023-36393: Windows User Interface Application Core Remote Code Execution Vulnerability
Windows User Interface Application Core Remote Code Execution Vulnerability
nvd
CVE-2024-30073P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.48942024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
nvd
CVE-2023-35358P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35358 [HIGH] CWE-125 CVE-2023-35358: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-35357P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35357 [HIGH] CWE-125 CVE-2023-35357: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38066P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38066 [HIGH] CWE-416 CVE-2024-38066: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2023-21747P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21747 [HIGH] CWE-416 CVE-2023-21747: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd