Microsoft Windows 10 Version 22H2 vulnerabilities

CVE-2025-62472 [HIGH] CWE-416 CVE-2025-62472: Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attac Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-26132 [HIGH] CWE-416 CVE-2026-26132: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69638 [HIGH] CWE-122 CVE-2026-69638: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69479 [HIGH] CWE-122 CVE-2026-69479: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-54122 [HIGH] CWE-122 CVE-2026-54122: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-70111 [HIGH] CWE-822 CVE-2026-70111: Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-25172 [HIGH] CWE-122 CVE-2026-25172: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-25173 [HIGH] CWE-122 CVE-2026-25173: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-26111 [HIGH] CWE-122 CVE-2026-26111: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-69623 [HIGH] CWE-122 CVE-2026-69623: Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute c Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

CVE-2026-20922 [HIGH] CWE-122 CVE-2026-20922: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69847 [HIGH] CWE-122 CVE-2026-69847: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

CVE-2026-23674 [HIGH] CWE-41 CVE-2026-23674: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70108 [HIGH] CWE-122 CVE-2026-70108: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 [HIGH] CWE-122 CVE-2026-70106: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96929 [HIGH] CWE-122 CVE-2026-96929: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70054 [HIGH] CWE-122 CVE-2026-70054: Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-85908 [HIGH] CWE-122 CVE-2026-85908: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70286 [HIGH] CWE-122 CVE-2026-70286: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-83867 [HIGH] CWE-122 CVE-2026-83867: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.