Microsoft Windows 10 Version 22H2 vulnerabilities

CVE-2026-25169 [MEDIUM] CWE-369 CVE-2026-25169: Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service local Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

CVE-2025-59203 [MEDIUM] CWE-532 CVE-2025-59203: Insertion of sensitive information into log file in Windows StateRepository API allows an authorized Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.

CVE-2025-59197 [MEDIUM] CWE-532 CVE-2025-59197: Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacke Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally.

CVE-2026-32181 [MEDIUM] CWE-269 CVE-2026-32181: Improper privilege management in Microsoft Windows allows an authorized attacker to deny service loc Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

CVE-2026-72931 [MEDIUM] CWE-772 CVE-2026-72931: Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SS Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

CVE-2025-21268 [MEDIUM] CWE-41 CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability

CVE-2026-20834 [MEDIUM] CWE-36 CVE-2026-20834: Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

CVE-2026-83582 [MEDIUM] CWE-416 CVE-2026-83582: Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-68849 [MEDIUM] CWE-125 CVE-2026-68849: Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose inform Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-83865 [MEDIUM] CWE-23 CVE-2026-83865: Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform t Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

CVE-2026-70195 [MEDIUM] CWE-362 CVE-2026-70195: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

CVE-2026-69548 [MEDIUM] CWE-122 CVE-2026-69548: Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69792 [MEDIUM] CWE-362 CVE-2026-69792: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.

CVE-2023-36908 [MEDIUM] CWE-200 CVE-2023-36908: Windows Hyper-V Information Disclosure Vulnerability Windows Hyper-V Information Disclosure Vulnerability

CVE-2022-44679 [MEDIUM] CVE-2022-44679: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

CVE-2024-38041 [MEDIUM] CWE-200 CVE-2024-38041: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability

CVE-2023-28271 [MEDIUM] CWE-200 CVE-2023-28271: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability

CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2025-21321 [MEDIUM] CWE-532 CVE-2025-21321: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21320 [MEDIUM] CWE-532 CVE-2025-21320: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability