Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 192 of 202
CVE-2026-61350P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-61350 [MEDIUM] CWE-126 CVE-2026-61350: Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a phys
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-20928P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-20928 [MEDIUM] CWE-212 CVE-2026-20928: Improper removal of sensitive information before storage or transfer in Windows Recovery Environment
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2025-58717P4MEDIUMCVSS 4.3≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-58717 [MEDIUM] CWE-125 CVE-2025-58717: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-55700P4MEDIUMCVSS 4.3≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-55700 [MEDIUM] CWE-125 CVE-2025-55700: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-20962P4MEDIUMCVSS 4.4≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20962 [MEDIUM] CWE-908 CVE-2026-20962: Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized a
Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.
nvd
CVE-2024-38027P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38027 [MEDIUM] CWE-400 CVE-2024-38027: Windows Line Printer Daemon Service Denial of Service Vulnerability
Windows Line Printer Daemon Service Denial of Service Vulnerability
nvd
CVE-2024-38234P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.48942024-09-10
CVE-2024-38234 [MEDIUM] CWE-20 CVE-2024-38234: Windows Networking Denial of Service Vulnerability
Windows Networking Denial of Service Vulnerability
nvd
CVE-2023-38140P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.34482023-09-12
CVE-2023-38140 [MEDIUM] CWE-908 CVE-2023-38140: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-21776P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21776 [MEDIUM] CWE-125 CVE-2023-21776: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2024-20694P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.39302024-01-09
CVE-2024-20694 [MEDIUM] CWE-908 CVE-2024-20694: Windows CoreMessaging Information Disclosure Vulnerability
Windows CoreMessaging Information Disclosure Vulnerability
nvd
CVE-2023-32016P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.30862023-06-14
CVE-2023-32016 [MEDIUM] CWE-908 CVE-2023-32016: Windows Installer Information Disclosure Vulnerability
Windows Installer Information Disclosure Vulnerability
nvd
CVE-2022-41074P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.23642022-12-13
CVE-2022-41074 [MEDIUM] CVE-2022-41074: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2023-28253P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28253 [MEDIUM] CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-35326P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35326 [MEDIUM] CWE-908 CVE-2023-35326: Windows CDP User Components Information Disclosure Vulnerability
Windows CDP User Components Information Disclosure Vulnerability
nvd
CVE-2024-38143P4MEDIUMCVSS 4.2≥ 10.0.19045.0, < 10.0.19045.47802024-08-13
CVE-2024-38143 [MEDIUM] CWE-306 CVE-2024-38143: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
nvd
CVE-2026-50453P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50453 [MEDIUM] CWE-125 CVE-2026-50453: Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2025-48813P4MEDIUMCVSS 4.7≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-48813 [MEDIUM] CWE-324 CVE-2025-48813: Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perfor
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.
nvd
CVE-2026-78508P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-78508 [MEDIUM] CWE-125 CVE-2026-78508: Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-69381P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69381 [MEDIUM] CWE-125 CVE-2026-69381: Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
nvd
CVE-2026-78452P4MEDIUMCVSS 4.6≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-78452 [MEDIUM] CWE-125 CVE-2026-78452: Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to di
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
nvd