Microsoft Windows 10 Version 22H2 vulnerabilities
2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
97
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11
Vulnerabilities
Page 62 of 121
CVE-2026-27908P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-27908 [HIGH] CWE-416 CVE-2026-27908: Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate
Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49690P3HIGHCVSS 7.4≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-49690 [HIGH] CWE-362 CVE-2025-49690: Concurrent execution using shared resource with improper synchronization ('race condition') in Capab
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2025-25004P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27921P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-27921 [HIGH] CWE-362 CVE-2026-27921: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-41108P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-41108 [HIGH] CWE-122 CVE-2026-41108: Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privile
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45653P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26635P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-26635 [MEDIUM] CWE-1390 CVE-2025-26635: Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36596P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36596 [HIGH] CWE-822 CVE-2023-36596: Remote Procedure Call Information Disclosure Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
nvd
CVE-2023-36710P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36710 [HIGH] CWE-197 CVE-2023-36710: Windows Media Foundation Core Remote Code Execution Vulnerability
Windows Media Foundation Core Remote Code Execution Vulnerability
nvd
CVE-2023-36438P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36438 [HIGH] CVE-2023-36438: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-36436P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36436 [HIGH] CVE-2023-36436: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2023-36393P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.36932023-11-14
CVE-2023-36393 [HIGH] CWE-426 CVE-2023-36393: Windows User Interface Application Core Remote Code Execution Vulnerability
Windows User Interface Application Core Remote Code Execution Vulnerability
nvd
CVE-2023-36598P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36598 [HIGH] CWE-122 CVE-2023-36598: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-30073P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.48942024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
nvd
CVE-2024-38066P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38066 [HIGH] CWE-416 CVE-2024-38066: Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2023-21747P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21747 [HIGH] CWE-416 CVE-2023-21747: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-21675P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21675 [HIGH] CWE-843 CVE-2023-21675: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-21748P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21748 [HIGH] CVE-2023-21748: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-21442P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.41702024-03-12
CVE-2024-21442 [HIGH] CWE-170 CVE-2024-21442: Windows USB Print Driver Elevation of Privilege Vulnerability
Windows USB Print Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21749P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21749 [HIGH] CWE-20 CVE-2023-21749: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd