Microsoft Windows 10 Version 22H2 vulnerabilities
4,035 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,035
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2892MEDIUM1001LOW11
Vulnerabilities
Page 40 of 202
CVE-2023-23416P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-23416 [HIGH] CWE-20 CVE-2023-23416: Windows Cryptographic Services Remote Code Execution Vulnerability
Windows Cryptographic Services Remote Code Execution Vulnerability
nvd
CVE-2026-83522P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83522 [HIGH] CWE-807 CVE-2026-83522: Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36400P3HIGHCVSS 8.8≥ 10.0.19045.0, < 10.0.19045.36932023-11-14
CVE-2023-36400 [HIGH] CWE-122 CVE-2023-36400: Windows HMAC Key Derivation Elevation of Privilege Vulnerability
Windows HMAC Key Derivation Elevation of Privilege Vulnerability
nvd
CVE-2025-62458P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.66912025-12-09
CVE-2025-62458 [HIGH] CWE-122 CVE-2025-62458: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26128P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.70582026-03-10
CVE-2026-26128 [HIGH] CWE-287 CVE-2026-26128: Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36903P3CRITICALCVSS 9.8≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-36903 [CRITICAL] CWE-59 CVE-2023-36903: Windows System Assessment Tool Elevation of Privilege Vulnerability
Windows System Assessment Tool Elevation of Privilege Vulnerability
nvd
CVE-2026-20864P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20864 [HIGH] CWE-122 CVE-2026-20864: Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attac
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-48814P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-48814 [HIGH] CWE-306 CVE-2025-48814: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an u
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-21239P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.69372026-02-10
CVE-2026-21239 [HIGH] CWE-122 CVE-2026-21239: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-21539P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21539 [HIGH] CWE-125 CVE-2023-21539: Windows Authentication Remote Code Execution Vulnerability
Windows Authentication Remote Code Execution Vulnerability
nvd
CVE-2026-70060P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70060 [HIGH] CWE-122 CVE-2026-70060: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69918P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58547P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-58547 [HIGH] CWE-122 CVE-2026-58547: Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to el
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83902P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83902 [HIGH] CWE-122 CVE-2026-83902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70117P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83768P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83768 [HIGH] CWE-122 CVE-2026-83768: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83896P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83896 [HIGH] CWE-122 CVE-2026-83896: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85902P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-85902 [HIGH] CWE-122 CVE-2026-85902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70285P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70285 [HIGH] CWE-122 CVE-2026-70285: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69898P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-69898 [HIGH] CWE-122 CVE-2026-69898: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd