Microsoft Windows 10 Version 22H2 vulnerabilities
2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
97
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11
Vulnerabilities
Page 84 of 121
CVE-2023-28217P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28217 [HIGH] CWE-400 CVE-2023-28217: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2022-41058P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.22512022-11-09
CVE-2022-41058 [HIGH] CVE-2022-41058: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
nvd
CVE-2023-36912P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-36912 [HIGH] CWE-20 CVE-2023-36912: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-38172P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-38172 [HIGH] CWE-126 CVE-2023-38172: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-24859P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.27282023-03-14
CVE-2023-24859 [HIGH] CWE-476 CVE-2023-24859: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2023-21813P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.26042023-02-14
CVE-2023-21813 [HIGH] CWE-126 CVE-2023-21813: Windows Secure Channel Denial of Service Vulnerability
Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2023-32044P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32044 [HIGH] CWE-125 CVE-2023-32044: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-32045P3HIGHCVSS 7.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-32045 [HIGH] CWE-125 CVE-2023-32045: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-36805P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.34482023-09-12
CVE-2023-36805 [HIGH] CWE-77 CVE-2023-36805: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2024-38032P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38032 [HIGH] CWE-122 CVE-2024-38032: Microsoft Xbox Remote Code Execution Vulnerability
Microsoft Xbox Remote Code Execution Vulnerability
nvd
CVE-2024-30099P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.45292024-06-11
CVE-2024-30099 [HIGH] CWE-367 CVE-2024-30099: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-53139P3HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.64562025-10-14
CVE-2025-53139 [HIGH] CWE-319 CVE-2025-53139: Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to
Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2025-26640P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-26640 [HIGH] CWE-415 CVE-2025-26640: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-35384P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.33242023-08-08
CVE-2023-35384 [MEDIUM] CWE-73 CVE-2023-35384: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2025-27732P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-27732 [HIGH] CWE-591 CVE-2025-27732: Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized att
Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-29841P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.58542025-05-13
CVE-2025-29841 [HIGH] CWE-362 CVE-2025-29841: Concurrent execution using shared resource with improper synchronization ('race condition') in Unive
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-47975P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.60932025-07-08
CVE-2025-47975 [HIGH] CWE-415 CVE-2025-47975: Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26665P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.57372025-04-08
CVE-2025-26665 [HIGH] CWE-591 CVE-2025-26665: Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized atta
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-33057P3MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.59652025-06-10
CVE-2025-33057 [MEDIUM] CWE-476 CVE-2025-33057: Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to
Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-53807P3HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.63322025-09-09
CVE-2025-53807 [HIGH] CWE-362 CVE-2025-53807: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd