cbcvebase.

Microsoft Windows 10 Version 22H2 vulnerabilities

2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.

Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
97
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11

Vulnerabilities

Page 78 of 121
CVE-2023-21526P3HIGHCVSS 7.4≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-21526 [HIGH] CVE-2023-21526: Windows Netlogon Information Disclosure Vulnerability Windows Netlogon Information Disclosure Vulnerability
nvd
CVE-2024-30093P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.45292024-06-11
CVE-2024-30093 [HIGH] CWE-59 CVE-2024-30093: Windows Storage Elevation of Privilege Vulnerability Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2024-43529P3HIGHCVSS 7.3≥ 10.0.19045.0, < 10.0.19045.50112024-10-08
CVE-2024-43529 [HIGH] CWE-822 CVE-2024-43529: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2024-30050P3MEDIUMCVSS 5.4≥ 10.0.19045.0, < 10.0.19045.44122024-05-14
CVE-2024-30050 [MEDIUM] CWE-693 CVE-2024-30050: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2026-50354P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.75482026-07-14
CVE-2026-50354 [HIGH] CWE-416 CVE-2026-50354: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53147P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-53147 [HIGH] CWE-416 CVE-2025-53147: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-24940P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.29652023-05-09
CVE-2023-24940 [HIGH] CWE-476 CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
nvd
CVE-2025-54115P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-54115 [HIGH] CWE-362 CVE-2025-54115: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53137P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-53137 [HIGH] CWE-416 CVE-2025-53137: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50167P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-50167 [HIGH] CWE-362 CVE-2025-50167: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53718P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-53718 [HIGH] CWE-416 CVE-2025-53718: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53721P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-53721 [HIGH] CWE-416 CVE-2025-53721: Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevat Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53802P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-53802 [HIGH] CWE-416 CVE-2025-53802: Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54112P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-54112 [HIGH] CWE-416 CVE-2025-54112: Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges l Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-60717P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.65752025-11-11
CVE-2025-60717 [HIGH] CWE-416 CVE-2025-60717: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59515P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.65752025-11-11
CVE-2025-59515 [HIGH] CWE-416 CVE-2025-59515: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20831P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20831 [HIGH] CWE-367 CVE-2026-20831: Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock a Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20869P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20869 [HIGH] CWE-362 CVE-2026-20869: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55223P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-55223 [HIGH] CWE-362 CVE-2025-55223: Concurrent execution using shared resource with improper synchronization ('race condition') in Graph Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21240P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.69372026-02-10
CVE-2026-21240 [HIGH] CWE-367 CVE-2026-21240: Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
← Previous78 / 121Next →
Microsoft Windows 10 Version 22H2 vulnerabilities | cvebase