Microsoft Windows 10 Version 22H2 vulnerabilities
4,035 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,035
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2890MEDIUM1003LOW11
Vulnerabilities
Page 11 of 202
CVE-2026-69681P2HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69681 [HIGH] CWE-122 CVE-2026-69681: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-21752P3HIGHCVSS 7.1PoC≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21752 [HIGH] CWE-284 CVE-2023-21752: Windows Backup Service Elevation of Privilege Vulnerability
Windows Backup Service Elevation of Privilege Vulnerability
nvd
CVE-2023-36910P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-36910 [CRITICAL] CWE-190 CVE-2023-36910: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35385P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-35385 [CRITICAL] CWE-190 CVE-2023-35385: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-32057P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32057 [CRITICAL] CWE-20 CVE-2023-32057: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-32015P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.30862023-06-14
CVE-2023-32015 [CRITICAL] CWE-20 CVE-2023-32015: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-29363P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.30862023-06-14
CVE-2023-29363 [CRITICAL] CWE-122 CVE-2023-29363: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-32014P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.30862023-06-14
CVE-2023-32014 [CRITICAL] CWE-191 CVE-2023-32014: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2023-35365P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35365 [CRITICAL] CWE-20 CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2023-36911P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-36911 [CRITICAL] CWE-190 CVE-2023-36911: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36005P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.38032023-12-12
CVE-2023-36005 [HIGH] CWE-591 CVE-2023-36005: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2026-57092P2CRITICALCVSS 9.9≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-57092 [CRITICAL] CWE-416 CVE-2026-57092: Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a networ
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-83770P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83770 [CRITICAL] CWE-122 CVE-2026-83770: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70147P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70147 [CRITICAL] CWE-122 CVE-2026-70147: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70153P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70153 [CRITICAL] CWE-122 CVE-2026-70153: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97814P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-97814 [CRITICAL] CWE-122 CVE-2026-97814: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70096P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70096 [CRITICAL] CWE-122 CVE-2026-70096: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70157P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70157 [CRITICAL] CWE-122 CVE-2026-70157: Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96924P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-96924 [CRITICAL] CWE-822 CVE-2026-96924: Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97816P2CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-97816 [CRITICAL] CWE-416 CVE-2026-97816: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
nvd