cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11

Vulnerabilities

Page 57 of 202
CVE-2022-44683P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.23642022-12-13
CVE-2022-44683 [HIGH] CWE-416 CVE-2022-44683: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-41113P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862022-11-09
CVE-2022-41113 [HIGH] CVE-2022-41113: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2023-35297P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35297 [HIGH] CWE-843 CVE-2023-35297: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2026-54128P3HIGHCVSS 8.4≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-54128 [HIGH] CWE-416 CVE-2026-54128: Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-27909P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-27909 [HIGH] CWE-416 CVE-2026-27909: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28283P3HIGHCVSS 8.1≥ 10.0.19045.0, < 10.0.19045.29652023-05-09
CVE-2023-28283 [HIGH] CWE-591 CVE-2023-28283: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-81354P3HIGHCVSS 8.2≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-81354 [HIGH] CWE-122 CVE-2026-81354: Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69332P3HIGHCVSS 8.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69332 [HIGH] CWE-125 CVE-2026-69332: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69505P3HIGHCVSS 8.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69505 [HIGH] CWE-125 CVE-2026-69505: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a networ Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69458P3HIGHCVSS 8.0≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69458 [HIGH] CWE-125 CVE-2026-69458: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a n Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-50365P3HIGHCVSS 8.0≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50365 [HIGH] CWE-287 CVE-2026-50365: Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2026-57087P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-57087 [HIGH] CWE-122 CVE-2026-57087: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-38184P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-20837P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20837 [HIGH] CWE-122 CVE-2026-20837: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-49089P3HIGHCVSS 7.2≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49089 [HIGH] CWE-122 CVE-2024-49089: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2026-70031P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83795P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83795 [HIGH] CWE-122 CVE-2026-83795: Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21246P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.69372026-02-10
CVE-2026-21246 [HIGH] CWE-122 CVE-2026-21246: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50695P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50695 [HIGH] CWE-121 CVE-2026-50695: Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
nvd
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase