Microsoft Windows 10 Version 22H2 vulnerabilities

2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs

2,407

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL63HIGH1710MEDIUM623LOW11

Vulnerabilities

SortPage 44 of 121

CVE-2026-27919P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14

CVE-2026-27919 [HIGH] CWE-822 CVE-2026-27919: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53150P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-10-14

CVE-2025-53150 [HIGH] CWE-362 CVE-2025-53150: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-55228P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.63322025-09-09

CVE-2025-55228 [HIGH] CWE-362 CVE-2025-55228: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

nvd

CVE-2026-20877P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13

CVE-2026-20877 [HIGH] CWE-362 CVE-2026-20877: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20924P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13

CVE-2026-20924 [HIGH] CWE-362 CVE-2026-20924: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50390P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50390 [HIGH] CWE-843 CVE-2026-50390: Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20858P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13

CVE-2026-20858 [HIGH] CWE-362 CVE-2026-20858: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59187P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-10-14

CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45605P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09

CVE-2026-45605 [HIGH] CWE-416 CVE-2026-45605: Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50391P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50391 [HIGH] CWE-269 CVE-2026-50391: Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privi Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50373P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50373 [HIGH] CWE-284 CVE-2026-50373: Improper access control in Microsoft Windows Search Component allows an authorized attacker to eleva Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59192P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-10-14

CVE-2025-59192 [HIGH] CWE-126 CVE-2025-59192: Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally. Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-42982P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-42982 [HIGH] CWE-1288 CVE-2026-42982: Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized a Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50358P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50358 [HIGH] CWE-416 CVE-2026-50358: Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50406P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50406 [HIGH] CWE-416 CVE-2026-50406: Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50359P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50359 [HIGH] CWE-416 CVE-2026-50359: Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges lo Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-57093P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-57093 [HIGH] CWE-416 CVE-2026-57093: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-32155P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14

CVE-2026-32155 [HIGH] CWE-416 CVE-2026-32155: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-32078P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14

CVE-2026-32078 [HIGH] CWE-416 CVE-2026-32078: Use after free in Windows Projected File System allows an authorized attacker to elevate privileges Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50293P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14

CVE-2026-50293 [HIGH] CWE-416 CVE-2026-50293: Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges loca Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.

nvd

← Previous44 / 121Next →