Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 183 of 202
CVE-2026-32218P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32218 [MEDIUM] CWE-532 CVE-2026-32218: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2024-21362P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21362 [MEDIUM] CWE-367 CVE-2024-21362: Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability
nvd
CVE-2026-32215P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32215 [MEDIUM] CWE-532 CVE-2026-32215: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32217P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32217 [MEDIUM] CWE-532 CVE-2026-32217: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-27930P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-27930 [MEDIUM] CWE-125 CVE-2026-27930: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-42915P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-42915 [MEDIUM] CWE-131 CVE-2026-42915: Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny servi
Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally.
nvd
CVE-2026-61928P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-61928 [MEDIUM] CWE-312 CVE-2026-61928: Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
nvd
CVE-2024-21320MEDIUMCVSS 6.5PoC≥ 10.0.19045.0, < 10.0.19045.39302024-01-09
CVE-2024-21320 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
cvelistv5
CVE-2025-21219P4MEDIUMCVSS 4.3≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21219 [MEDIUM] CWE-41 CVE-2025-21219: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-21189P4MEDIUMCVSS 4.3≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21189 [MEDIUM] CWE-41 CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2026-83774P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83774 [MEDIUM] CWE-497 CVE-2026-83774: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83925P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83925 [MEDIUM] CWE-497 CVE-2026-83925: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83905P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83905 [MEDIUM] CWE-497 CVE-2026-83905: Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83897P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83897 [MEDIUM] CWE-497 CVE-2026-83897: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70077P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70077 [MEDIUM] CWE-416 CVE-2026-70077: Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69316P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69316 [MEDIUM] CWE-126 CVE-2026-69316: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50310P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50310 [MEDIUM] CWE-190 CVE-2026-50310: Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to d
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.
nvd
CVE-2026-73019P4MEDIUMCVSS 4.3≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-73019 [MEDIUM] CWE-41 CVE-2026-73019: Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to by
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2025-24992P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.56082025-03-11
CVE-2025-24992 [MEDIUM] CWE-126 CVE-2025-24992: Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-21682P4MEDIUMCVSS 5.3≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21682 [MEDIUM] CWE-125 CVE-2023-21682: Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
nvd