cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11

Vulnerabilities

Page 121 of 202
CVE-2023-36574P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36574 [HIGH] CWE-94 CVE-2023-36574: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36591P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36591 [HIGH] CWE-94 CVE-2023-36591: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36571P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36571 [HIGH] CWE-94 CVE-2023-36571: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36573P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36573 [HIGH] CWE-94 CVE-2023-36573: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36589P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36589 [HIGH] CWE-94 CVE-2023-36589: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36570P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36570 [HIGH] CWE-94 CVE-2023-36570: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36575P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36575 [HIGH] CWE-94 CVE-2023-36575: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36572P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36572 [HIGH] CWE-94 CVE-2023-36572: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-43615P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43615 [HIGH] CWE-73 CVE-2024-43615: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
nvd
CVE-2025-49680P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-49680 [HIGH] CWE-59 CVE-2025-49680: Improper link resolution before file access ('link following') in Windows Performance Recorder allow Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.
nvd
CVE-2026-32093P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32093 [HIGH] CWE-122 CVE-2026-32093: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36394P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.36932023-11-14
CVE-2023-36394 [HIGH] CWE-59 CVE-2023-36394: Windows Search Service Elevation of Privilege Vulnerability Windows Search Service Elevation of Privilege Vulnerability
nvd
CVE-2026-24285P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.70582026-03-10
CVE-2026-24285 [HIGH] CWE-416 CVE-2026-24285: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21242P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.69372026-02-10
CVE-2026-21242 [HIGH] CWE-416 CVE-2026-21242: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70249P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70249 [HIGH] CWE-416 CVE-2026-70249: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70271P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70271 [HIGH] CWE-416 CVE-2026-70271: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70253P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70253 [HIGH] CWE-416 CVE-2026-70253: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70176P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70176 [HIGH] CWE-416 CVE-2026-70176: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70237P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70237 [HIGH] CWE-416 CVE-2026-70237: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-23667P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.70582026-03-10
CVE-2026-23667 [HIGH] CWE-416 CVE-2026-23667: Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase