cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,035 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,035
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2892MEDIUM1001LOW11

Vulnerabilities

Page 32 of 202
CVE-2024-21368P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21368 [HIGH] CWE-122 CVE-2024-21368: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21367P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21367 [HIGH] CWE-122 CVE-2024-21367: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21359P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21359 [HIGH] CWE-122 CVE-2024-21359: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21391P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21391 [HIGH] CWE-197 CVE-2024-21391: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21352P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.40462024-02-13
CVE-2024-21352 [HIGH] CWE-197 CVE-2024-21352: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-49798P3CRITICALCVSS 9.3≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-49798 [CRITICAL] CWE-416 CVE-2026-49798: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2024-43519P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43519 [HIGH] CWE-197 CVE-2024-43519: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-21222P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-21222 [HIGH] CWE-122 CVE-2025-21222: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21221P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-21221 [HIGH] CWE-122 CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21205P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-21205 [HIGH] CWE-122 CVE-2025-21205: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38053P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38053 [HIGH] CWE-416 CVE-2024-38053: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2025-21409P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21409 [HIGH] CWE-122 CVE-2025-21409: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21339P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21339 [HIGH] CWE-122 CVE-2025-21339: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21411P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21411 [HIGH] CWE-122 CVE-2025-21411: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21413P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.53712025-01-14
CVE-2025-21413 [HIGH] CWE-122 CVE-2025-21413: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2026-50509P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50509 [HIGH] CWE-502 CVE-2026-50509: Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-43518P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43518 [HIGH] CWE-122 CVE-2024-43518: Windows Telephony Server Remote Code Execution Vulnerability Windows Telephony Server Remote Code Execution Vulnerability
nvd
CVE-2025-53131P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-53131 [HIGH] CWE-122 CVE-2025-53131: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83797P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83797 [HIGH] CWE-125 CVE-2026-83797: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69494P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69494 [HIGH] CWE-122 CVE-2026-69494: Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
nvd
← Previous32 / 202Next →
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase