Microsoft Windows 10 Version 22H2 vulnerabilities
2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
97
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11
Vulnerabilities
Page 111 of 121
CVE-2023-32041P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32041 [MEDIUM] CWE-908 CVE-2023-32041: Windows Update Orchestrator Service Information Disclosure Vulnerability
Windows Update Orchestrator Service Information Disclosure Vulnerability
nvd
CVE-2024-38151P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.47802024-08-13
CVE-2024-38151 [MEDIUM] CWE-125 CVE-2024-38151: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2025-21374P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21374 [MEDIUM] CWE-125 CVE-2025-21374: Windows CSC Service Information Disclosure Vulnerability
Windows CSC Service Information Disclosure Vulnerability
nvd
CVE-2023-24945P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.29652023-05-09
CVE-2023-24945 [MEDIUM] CWE-190 CVE-2023-24945: Windows iSCSI Target Service Information Disclosure Vulnerability
Windows iSCSI Target Service Information Disclosure Vulnerability
nvd
CVE-2022-41055P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.22512022-11-09
CVE-2022-41055 [MEDIUM] CVE-2022-41055: Windows Human Interface Device Information Disclosure Vulnerability
Windows Human Interface Device Information Disclosure Vulnerability
nvd
CVE-2023-35326P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35326 [MEDIUM] CWE-908 CVE-2023-35326: Windows CDP User Components Information Disclosure Vulnerability
Windows CDP User Components Information Disclosure Vulnerability
nvd
CVE-2025-48813P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-48813 [MEDIUM] CWE-324 CVE-2025-48813: Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perfor
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.
nvd
CVE-2026-20928P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-20928 [MEDIUM] CWE-212 CVE-2026-20928: Improper removal of sensitive information before storage or transfer in Windows Recovery Environment
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2024-38027P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38027 [MEDIUM] CWE-400 CVE-2024-38027: Windows Line Printer Daemon Service Denial of Service Vulnerability
Windows Line Printer Daemon Service Denial of Service Vulnerability
nvd
CVE-2023-21776P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21776 [MEDIUM] CWE-125 CVE-2023-21776: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-32016P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.30862023-06-14
CVE-2023-32016 [MEDIUM] CWE-908 CVE-2023-32016: Windows Installer Information Disclosure Vulnerability
Windows Installer Information Disclosure Vulnerability
nvd
CVE-2023-21540P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21540 [MEDIUM] CWE-20 CVE-2023-21540: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21550P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21550 [MEDIUM] CWE-20 CVE-2023-21550: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21559P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21559 [MEDIUM] CWE-20 CVE-2023-21559: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-28253P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28253 [MEDIUM] CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2022-41074P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.23642022-12-13
CVE-2022-41074 [MEDIUM] CVE-2022-41074: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2023-36722P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36722 [MEDIUM] CWE-284 CVE-2023-36722: Active Directory Domain Services Information Disclosure Vulnerability
Active Directory Domain Services Information Disclosure Vulnerability
nvd
CVE-2024-38143P4MEDIUMCVSS 4.2≥ 10.0.19045.0, < 10.0.19045.47802024-08-13
CVE-2024-38143 [MEDIUM] CWE-306 CVE-2024-38143: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
nvd
CVE-2026-20828P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20828 [MEDIUM] CWE-125 CVE-2026-20828: Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to d
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2025-59294P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-59294 [MEDIUM] CWE-200 CVE-2025-59294: Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unautho
Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack.
nvd