cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11

Vulnerabilities

Page 164 of 202
CVE-2024-49101P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49101 [MEDIUM] CWE-125 CVE-2024-49101: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49109P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49109 [MEDIUM] CWE-125 CVE-2024-49109: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2024-49081P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49081 [MEDIUM] CWE-122 CVE-2024-49081: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49094P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49094 [MEDIUM] CWE-122 CVE-2024-49094: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49111P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49111 [MEDIUM] CWE-125 CVE-2024-49111: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2026-69469P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69469 [MEDIUM] CWE-122 CVE-2026-69469: Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthoriz Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2024-21316P4MEDIUMCVSS 6.1≥ 10.0.19045.0, < 10.0.19045.39302024-01-09
CVE-2024-21316 [MEDIUM] CWE-20 CVE-2024-21316: Windows Server Key Distribution Service Security Feature Bypass Windows Server Key Distribution Service Security Feature Bypass
nvd
CVE-2024-21430P4MEDIUMCVSS 6.4≥ 10.0.19045.0, < 10.0.19045.41702024-03-12
CVE-2024-21430 [MEDIUM] CWE-125 CVE-2024-21430: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-21339P4MEDIUMCVSS 6.4≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21339 [MEDIUM] CWE-416 CVE-2024-21339: Windows USB Generic Parent Driver Remote Code Execution Vulnerability Windows USB Generic Parent Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21242P4MEDIUMCVSS 5.9≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2026-49807P4MEDIUMCVSS 6.2≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-49807 [MEDIUM] CWE-200 CVE-2026-49807: Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50294P4MEDIUMCVSS 6.2≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50294 [MEDIUM] CWE-497 CVE-2026-50294: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-27735P4MEDIUMCVSS 6.0≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-27735 [MEDIUM] CWE-345 CVE-2025-27735: Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclav Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-50485P4MEDIUMCVSS 5.7≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2026-83907P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83907 [MEDIUM] CWE-497 CVE-2026-83907: Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows a Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69644P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-69644 [MEDIUM] CWE-497 CVE-2026-69644: Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
nvd
CVE-2026-20824P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20824 [MEDIUM] CWE-693 CVE-2026-20824: Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-32088P4MEDIUMCVSS 5.7≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32088 [MEDIUM] CWE-362 CVE-2026-32088: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-72980P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-72980 [MEDIUM] CWE-427 CVE-2026-72980: Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
nvd
← Previous164 / 202Next →
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase