Microsoft Windows 10 Version 22H2 vulnerabilities
4,035 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,035
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2892MEDIUM1001LOW11
Vulnerabilities
Page 38 of 202
CVE-2026-65671P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-65671 [HIGH] CWE-122 CVE-2026-65671: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70346P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-70346 [HIGH] CWE-121 CVE-2026-70346: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50412P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50412 [HIGH] CWE-121 CVE-2026-50412: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50400P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50400 [HIGH] CWE-121 CVE-2026-50400: Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privil
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-57096P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-57096 [HIGH] CWE-122 CVE-2026-57096: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50318P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50318 [HIGH] CWE-121 CVE-2026-50318: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50387P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50387 [HIGH] CWE-121 CVE-2026-50387: Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges local
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85368P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85368 [HIGH] CWE-122 CVE-2026-85368: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83767P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83767 [HIGH] CWE-121 CVE-2026-83767: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20849P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-85867P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69793P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-83754P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83754 [HIGH] CWE-122 CVE-2026-83754: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96071P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69602P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69602 [HIGH] CWE-416 CVE-2026-69602: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69706P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-78446P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-78446 [HIGH] CWE-416 CVE-2026-78446: Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute cod
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-85798P3HIGHCVSS 7.2≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2025-59199P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-59199 [HIGH] CWE-284 CVE-2025-59199: Improper access control in Software Protection Platform (SPP) allows an authorized attacker to eleva
Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-41048P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.22512022-11-09
CVE-2022-41048 [HIGH] CVE-2022-41048: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd