Microsoft Windows 10 Version 22H2 vulnerabilities
4,035 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,035
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2890MEDIUM1003LOW11
Vulnerabilities
Page 21 of 202
CVE-2026-69689P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69689 [HIGH] CWE-121 CVE-2026-69689: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a netw
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69717P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69717 [HIGH] CWE-125 CVE-2026-69717: Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-47653P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42975P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-88157P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-88157 [HIGH] CWE-122 CVE-2026-88157: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85905P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85905 [HIGH] CWE-122 CVE-2026-85905: Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83716P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83716 [HIGH] CWE-122 CVE-2026-83716: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-20860P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33837P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.74172026-05-12
CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70229P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70229 [HIGH] CWE-863 CVE-2026-70229: Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62792P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-56649P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26230P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.42912024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2025-50177P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49104P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49102P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21223P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43622P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43622 [HIGH] CWE-122 CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43620P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43620 [HIGH] CWE-122 CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43621P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43621 [HIGH] CWE-122 CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd