Microsoft Windows 10 Version 22H2 vulnerabilities
2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
96
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11
Vulnerabilities
Page 36 of 121
CVE-2026-50469P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50469 [HIGH] CWE-59 CVE-2026-50469: Improper link resolution before file access ('link following') in Windows Projected File System allo
Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-48583P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-48583 [HIGH] CWE-416 CVE-2026-48583: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26159P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-26159 [HIGH] CWE-306 CVE-2026-26159: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-35644P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.38032023-12-12
CVE-2023-35644 [HIGH] CWE-190 CVE-2023-35644: Windows Sysmain Service Elevation of Privilege Vulnerability
Windows Sysmain Service Elevation of Privilege Vulnerability
nvd
CVE-2026-26176P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-26176 [HIGH] CWE-122 CVE-2026-26176: Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized atta
Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50333P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50333 [HIGH] CWE-306 CVE-2026-50333: Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker
Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50459P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50459 [HIGH] CWE-416 CVE-2026-50459: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-35309P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35309 [HIGH] CWE-591 CVE-2023-35309: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35386P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-35386 [HIGH] CWE-125 CVE-2023-35386: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2026-50504P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50504 [HIGH] CWE-126 CVE-2026-50504: Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information ov
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2023-35382P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-35382 [HIGH] CWE-416 CVE-2023-35382: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2026-42992P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-42992 [HIGH] CWE-122 CVE-2026-42992: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-44799P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-44799 [HIGH] CWE-122 CVE-2026-44799: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42993P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-42993 [HIGH] CWE-122 CVE-2026-42993: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32161P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.74172026-05-12
CVE-2026-32161 [HIGH] CWE-362 CVE-2026-32161: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2024-30025P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.44122024-05-14
CVE-2024-30025 [HIGH] CWE-125 CVE-2024-30025: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43630P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.51312024-11-12
CVE-2024-43630 [HIGH] CWE-121 CVE-2024-43630: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38237P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.48942024-09-10
CVE-2024-38237 [HIGH] CWE-122 CVE-2024-38237: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38242P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.48942024-09-10
CVE-2024-38242 [HIGH] CWE-122 CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-30068P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.45292024-06-11
CVE-2024-30068 [HIGH] CWE-125 CVE-2024-30068: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd