Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 190 of 202
CVE-2026-84009P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-84009 [MEDIUM] CWE-367 CVE-2026-84009: Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authori
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-20825P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20825 [MEDIUM] CWE-284 CVE-2026-20825: Improper access control in Windows Hyper-V allows an authorized attacker to disclose information loc
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
nvd
CVE-2026-27906P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-27906 [MEDIUM] CWE-20 CVE-2026-27906: Improper input validation in Windows Hello allows an authorized attacker to bypass a security featur
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-102221P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-102221 [MEDIUM] CWE-299 CVE-2026-102221: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69713P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69713 [MEDIUM] CWE-1395 CVE-2026-69713: Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-70075P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70075 [MEDIUM] CWE-367 CVE-2026-70075: Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enc
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-32209P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.74172026-05-12
CVE-2026-32209 [MEDIUM] CWE-284 CVE-2026-32209: Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2024-43555P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43555 [MEDIUM] CWE-125 CVE-2024-43555: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43561P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43561 [MEDIUM] CWE-20 CVE-2024-43561: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43558P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43558 [MEDIUM] CWE-20 CVE-2024-43558: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43557P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43557 [MEDIUM] CWE-20 CVE-2024-43557: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43559P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43559 [MEDIUM] CWE-476 CVE-2024-43559: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43538P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43538 [MEDIUM] CWE-20 CVE-2024-43538: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43542P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43542 [MEDIUM] CWE-20 CVE-2024-43542: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43537P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43537 [MEDIUM] CWE-125 CVE-2024-43537: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2024-43540P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43540 [MEDIUM] CWE-20 CVE-2024-43540: Windows Mobile Broadband Driver Denial of Service Vulnerability
Windows Mobile Broadband Driver Denial of Service Vulnerability
nvd
CVE-2023-36717P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36717 [MEDIUM] CVE-2023-36717: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
nvd
CVE-2025-21347P4MEDIUMCVSS 6.0≥ 10.0.19045.0, < 10.0.19045.54872025-02-11
CVE-2025-21347 [MEDIUM] CWE-59 CVE-2025-21347: Windows Deployment Services Denial of Service Vulnerability
Windows Deployment Services Denial of Service Vulnerability
nvd
CVE-2024-26177P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.41702024-03-12
CVE-2024-26177 [MEDIUM] CWE-200 CVE-2024-26177: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-36803P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.34482023-09-12
CVE-2023-36803 [MEDIUM] CWE-126 CVE-2023-36803: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd