Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 191 of 202
CVE-2024-38017P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38017 [MEDIUM] CWE-200 CVE-2024-38017: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2024-26174P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.41702024-03-12
CVE-2024-26174 [MEDIUM] CWE-125 CVE-2024-26174: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-36576P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36576 [MEDIUM] CWE-190 CVE-2023-36576: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-30008P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.44122024-05-14
CVE-2024-30008 [MEDIUM] CWE-191 CVE-2024-30008: Windows DWM Core Library Information Disclosure Vulnerability
Windows DWM Core Library Information Disclosure Vulnerability
nvd
CVE-2024-21311P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.39302024-01-09
CVE-2024-21311 [MEDIUM] CWE-125 CVE-2024-21311: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2023-36404P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.36932023-11-14
CVE-2023-36404 [MEDIUM] CWE-284 CVE-2023-36404: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-33174P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-33174 [MEDIUM] CWE-200 CVE-2023-33174: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-32041P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32041 [MEDIUM] CWE-908 CVE-2023-32041: Windows Update Orchestrator Service Information Disclosure Vulnerability
Windows Update Orchestrator Service Information Disclosure Vulnerability
nvd
CVE-2024-38151P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.47802024-08-13
CVE-2024-38151 [MEDIUM] CWE-125 CVE-2024-38151: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-21540P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21540 [MEDIUM] CWE-20 CVE-2023-21540: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21550P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21550 [MEDIUM] CWE-20 CVE-2023-21550: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21559P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21559 [MEDIUM] CWE-20 CVE-2023-21559: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2022-41055P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.22512022-11-09
CVE-2022-41055 [MEDIUM] CVE-2022-41055: Windows Human Interface Device Information Disclosure Vulnerability
Windows Human Interface Device Information Disclosure Vulnerability
nvd
CVE-2023-24945P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.29652023-05-09
CVE-2023-24945 [MEDIUM] CWE-190 CVE-2023-24945: Windows iSCSI Target Service Information Disclosure Vulnerability
Windows iSCSI Target Service Information Disclosure Vulnerability
nvd
CVE-2025-59190P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-59190 [MEDIUM] CWE-20 CVE-2025-59190: Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to d
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
nvd
CVE-2025-55679P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-55679 [MEDIUM] CWE-20 CVE-2025-55679: Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information
Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-58719P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-58719 [MEDIUM] CWE-416 CVE-2025-58719: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55332P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-55332 [MEDIUM] CWE-841 CVE-2025-55332: Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-58528P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-58528 [MEDIUM] CWE-125 CVE-2026-58528: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-88226P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-88226 [MEDIUM] CWE-125 CVE-2026-88226: Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
nvd