Windows 10 22h2 vulnerabilities

344 known vulnerabilities in Windows 10 22h2 from Microsoft. 328 are rated high or critical, and 85 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-20848Jan 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-20836Jan 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-20831Jan 13, 2026Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-20826Jan 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-20814Jan 13, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

• 5.5 Medium severity

  Microsoft Windows Information Disclosure Exploited

  CVE-2026-20805Jan 13, 2026MicrosoftEPSS 7.46%

  Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

• 7.8 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-64661Dec 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-64658Dec 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Microsoft Windows Use After Free Exploited

  CVE-2025-62221Dec 9, 2025MicrosoftEPSS 2.51%

  Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Neutralization of Special Elements used in a Command

  CVE-2025-54100Dec 9, 2025MicrosoftEPSS 1.66%

  Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-62218Nov 11, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-62217Nov 11, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Microsoft Windows Race Condition Exploited

  CVE-2025-62215Nov 11, 2025MicrosoftEPSS 4.46%

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59508Nov 11, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59507Nov 11, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59506Nov 11, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59282Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.

• 7.8 High severity

  Microsoft Windows Improper Access Control Exploited

  CVE-2025-59230Oct 14, 2025MicrosoftEPSS 2.72%

  Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59205Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

• 7.7 High severity

  Windows 10 Version 1507: External Control of File Name or Path

  CVE-2025-59200Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59196Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59195Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59193Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-58727Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Use of a Cryptographic Primitive with a Risky Implementation

  CVE-2025-58720Oct 14, 2025Microsoft

  Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

• 7.0 High severity

  Windows 10 Version 1809: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-55696Oct 14, 2025Microsoft

  Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55687Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-55680Oct 14, 2025Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55328Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Microsoft Windows Untrusted Pointer Dereference Exploited

  CVE-2025-24990Oct 14, 2025MicrosoftEPSS 7.95%

  Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulati

• 7.8 High severity

  Windows 10 Version 1507: Stack-based Buffer Overflow

  CVE-2025-24052Oct 14, 2025MicrosoftEPSS 2.54%

  Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulati

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59220Sep 18, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

• 9.8 Critical severity

  Windows 10 Version 1507: Improper Authentication

  CVE-2025-55234Sep 9, 2025MicrosoftEPSS 20.8%

  SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already suppo

• 7.8 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55228Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55224Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55223Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54919Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.8 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54913Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54115Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54114Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.