← Back

Windows 10 22h2

windows_10_22h2

Vendor: Microsoft • 2,492 CVEs

CVEs (2,492)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 25, 2026
Aug 11, 2026
N/A· v4
5.6 MEDIUM· v3
N/A· v2
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 25, 2026
Aug 11, 2026
N/A· v4
5.6 MEDIUM· v3
N/A· v2
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 17, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 23h2+5 more
Aug 12, 2026
Aug 11, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 1809
Windows 10 21h2Windows 10 22h2+4 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1809
Windows 10 21h2Windows 10 22h2+9 more
Jul 17, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 17, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.