cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11

Vulnerabilities

Page 157 of 202
CVE-2023-24906P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-24906 [MEDIUM] CWE-190 CVE-2023-24906: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24857P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-24857 [MEDIUM] CWE-126 CVE-2023-24857: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24863P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-24863 [MEDIUM] CWE-190 CVE-2023-24863: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2023-24870P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-24870 [MEDIUM] CWE-126 CVE-2023-24870: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2024-43525P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43525 [MEDIUM] CWE-20 CVE-2024-43525: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2024-43526P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43526 [MEDIUM] CWE-20 CVE-2024-43526: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2024-43523P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43523 [MEDIUM] CWE-20 CVE-2024-43523: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2024-43524P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43524 [MEDIUM] CWE-118 CVE-2024-43524: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2024-43543P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43543 [MEDIUM] CWE-601 CVE-2024-43543: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2024-43536P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43536 [MEDIUM] CWE-601 CVE-2024-43536: Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows Mobile Broadband Driver Remote Code Execution Vulnerability
nvd
CVE-2026-83776P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83776 [MEDIUM] CWE-125 CVE-2026-83776: Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileg Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-57097P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-57097 [MEDIUM] CWE-426 CVE-2026-57097: Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-77892P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-77892 [MEDIUM] CWE-693 CVE-2026-77892: No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-50298P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50298 [MEDIUM] CWE-190 CVE-2026-50298: Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate p Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2024-21431P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.41702024-03-12
CVE-2024-21431 [MEDIUM] CWE-732 CVE-2024-21431: Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
nvd
CVE-2025-54104P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-54104 [MEDIUM] CWE-843 CVE-2025-54104: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service a Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62881P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-62881 [MEDIUM] CWE-122 CVE-2026-62881: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62769P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-62769 [MEDIUM] CWE-122 CVE-2026-62769: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65798P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-65798 [MEDIUM] CWE-197 CVE-2026-65798: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62883P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-62883 [MEDIUM] CWE-122 CVE-2026-62883: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
← Previous157 / 202Next →
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase