Microsoft Windows 10 Version 22H2 vulnerabilities
4,030 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
4,030
CISA KEV
83
actively exploited
Public exploits
53
Exploited in wild
100
Severity breakdown
CRITICAL131HIGH2888MEDIUM1000LOW11
Vulnerabilities
Page 69 of 202
CVE-2026-44806P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-44806 [HIGH] CWE-401 CVE-2026-44806: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-70245P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70245 [HIGH] CWE-843 CVE-2026-70245: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83761P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83761 [HIGH] CWE-416 CVE-2026-83761: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70303P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70303 [HIGH] CWE-787 CVE-2026-70303: Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45636P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45636 [HIGH] CWE-20 CVE-2026-45636: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26156P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-26156 [HIGH] CWE-20 CVE-2026-26156: Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locall
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59242P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-59242 [HIGH] CWE-122 CVE-2025-59242: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83763P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83763 [HIGH] CWE-843 CVE-2026-83763: Access of resource using incompatible type ('type confusion') in Windows Input System allows an auth
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83927P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-83927 [HIGH] CWE-59 CVE-2026-83927: Improper link resolution before file access ('link following') in Windows Registry allows an authori
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32154P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-32154 [HIGH] CWE-416 CVE-2026-32154: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70225P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70225 [HIGH] CWE-843 CVE-2026-70225: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70102P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-70102 [HIGH] CWE-416 CVE-2026-70102: Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69884P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-69884 [HIGH] CWE-126 CVE-2026-69884: Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-64680P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.64562025-12-09
CVE-2025-64680 [HIGH] CWE-122 CVE-2025-64680: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97798P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-97798 [HIGH] CWE-88 CVE-2026-97798: Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69289P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.77252026-09-08
CVE-2026-69289 [HIGH] CWE-59 CVE-2026-69289: Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61358P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.76632026-08-11
CVE-2026-61358 [HIGH] CWE-59 CVE-2026-61358: Improper link resolution before file access ('link following') in Windows Accessibility Infrastructu
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50469P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50469 [HIGH] CWE-59 CVE-2026-50469: Improper link resolution before file access ('link following') in Windows Projected File System allo
Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62474P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.66912025-12-09
CVE-2025-62474 [HIGH] CWE-284 CVE-2025-62474: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102216P3HIGHCVSS 7.8≥ 10.0.19045.0, < 10.0.19045.78072026-10-13
CVE-2026-102216 [HIGH] CWE-843 CVE-2026-102216: Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd