cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11

Vulnerabilities

Page 167 of 202
CVE-2022-44684P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.23642023-12-20
CVE-2022-44684 [MEDIUM] CVE-2022-44684: Windows Local Session Manager (LSM) Denial of Service Vulnerability Windows Local Session Manager (LSM) Denial of Service Vulnerability
nvd
CVE-2024-43634P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43634 [MEDIUM] CWE-125 CVE-2024-43634: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43449P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43449 [MEDIUM] CWE-125 CVE-2024-43449: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43637P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43637 [MEDIUM] CWE-125 CVE-2024-43637: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43638P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43638 [MEDIUM] CWE-125 CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43643P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43643 [MEDIUM] CWE-125 CVE-2024-43643: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38223P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.47802024-08-13
CVE-2024-38223 [MEDIUM] CWE-284 CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability Windows Initial Machine Configuration Elevation of Privilege Vulnerability
nvd
CVE-2025-24987P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.56082025-03-11
CVE-2025-24987 [MEDIUM] CWE-125 CVE-2025-24987: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-24988P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.56082025-03-11
CVE-2025-24988 [MEDIUM] CWE-125 CVE-2025-24988: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2023-28249P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28249 [MEDIUM] CWE-863 CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2025-49751P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-49751 [MEDIUM] CWE-820 CVE-2025-49751: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-47999P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-47999 [MEDIUM] CWE-820 CVE-2025-47999: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2023-32055P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32055 [MEDIUM] CWE-416 CVE-2023-32055: Active Template Library Elevation of Privilege Vulnerability Active Template Library Elevation of Privilege Vulnerability
nvd
CVE-2025-47980P4MEDIUMCVSS 6.2≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-47980 [MEDIUM] CWE-200 CVE-2025-47980: Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an un Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-24900P4MEDIUMCVSS 5.9≥ 10.0.19045.0, < 10.0.19045.29652023-05-09
CVE-2023-24900 [MEDIUM] CWE-125 CVE-2023-24900: Windows NTLM Security Support Provider Information Disclosure Vulnerability Windows NTLM Security Support Provider Information Disclosure Vulnerability
nvd
CVE-2025-54101P4MEDIUMCVSS 4.8≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-54101 [MEDIUM] CWE-416 CVE-2025-54101: Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network. Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
nvd
CVE-2026-70232P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70232 [MEDIUM] CWE-497 CVE-2026-70232: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83713P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83713 [MEDIUM] CWE-497 CVE-2026-83713: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70199P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70199 [MEDIUM] CWE-497 CVE-2026-70199: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-108462P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-108462 [MEDIUM] CWE-497 CVE-2026-108462: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
← Previous167 / 202Next →
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase