Microsoft Windows 10 Version 22H2 vulnerabilities
2,407 known vulnerabilities affecting microsoft/windows_10_version_22h2.
Total CVEs
2,407
CISA KEV
79
actively exploited
Public exploits
52
Exploited in wild
97
Severity breakdown
CRITICAL63HIGH1710MEDIUM623LOW11
Vulnerabilities
Page 94 of 121
CVE-2023-36713P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.35702023-10-10
CVE-2023-36713 [MEDIUM] CWE-908 CVE-2023-36713: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2026-20824P4MEDIUMCVSS 5.5≥ 10.0.19045.0, < 10.0.19045.68092026-01-13
CVE-2026-20824 [MEDIUM] CWE-693 CVE-2026-20824: Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-23670P4MEDIUMCVSS 5.7≥ 10.0.19045.0, < 10.0.19045.71842026-04-14
CVE-2026-23670 [MEDIUM] CWE-822 CVE-2026-23670: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-35423P4MEDIUMCVSS 5.4≥ 10.0.19045.0, < 10.0.19045.74172026-05-12
CVE-2026-35423 [MEDIUM] CWE-125 CVE-2026-35423: Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a n
Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-45595P4MEDIUMCVSS 5.4≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45595 [MEDIUM] CWE-693 CVE-2026-45595: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-21760P4HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21760 [HIGH] CWE-59 CVE-2023-21760: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2023-35347P4HIGHCVSS 7.1≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35347 [HIGH] CWE-59 CVE-2023-35347: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2023-35318P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35318 [MEDIUM] CWE-125 CVE-2023-35318: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-35319P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35319 [MEDIUM] CWE-125 CVE-2023-35319: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-35314P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-35314 [MEDIUM] CWE-125 CVE-2023-35314: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-33164P4MEDIUMCVSS 6.5≥ 10.0.19045.0, < 10.0.19045.32082023-07-11
CVE-2023-33164 [MEDIUM] CWE-125 CVE-2023-33164: Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2025-50158P4HIGHCVSS 7.0≥ 10.0.19045.0, < 10.0.19045.62162025-08-12
CVE-2025-50158 [HIGH] CWE-367 CVE-2025-50158: Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-21560P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.24862023-01-10
CVE-2023-21560 [MEDIUM] CWE-122 CVE-2023-21560: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28269P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28269 [MEDIUM] CWE-122 CVE-2023-28269: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28249P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.28462023-04-11
CVE-2023-28249 [MEDIUM] CWE-863 CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability
Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2024-38013P4MEDIUMCVSS 6.7≥ 10.0.19045.0, < 10.0.19045.46512024-07-09
CVE-2024-38013 [MEDIUM] CWE-59 CVE-2024-38013: Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
nvd
CVE-2024-49101P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49101 [MEDIUM] CWE-125 CVE-2024-49101: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2024-49109P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49109 [MEDIUM] CWE-125 CVE-2024-49109: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8≥ 10.0.19045.0, < 10.0.19045.74172026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2024-49081P4MEDIUMCVSS 6.6≥ 10.0.19045.0, < 10.0.19045.52472024-12-12
CVE-2024-49081 [MEDIUM] CWE-122 CVE-2024-49081: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
nvd