Windows 10 22h2 vulnerabilities
344 known vulnerabilities in Windows 10 22h2 from Microsoft. 328 are rated high or critical, and 85 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 5.5 Medium severity
Microsoft WordPad Information Disclosure Exploited
Microsoft WordPad Information Disclosure Vulnerability
- 7.5 High severity
HTTP/2 Rapid Reset Attack Exploited
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- 7.5 High severity
curl: Allocation of Resources Without Limits or Throttling
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server
- 7.8 High severity
Microsoft Streaming Service Proxy Privilege Escalation Exploited
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Windows Search Remote Code Execution Exploited
Windows Search Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Error Reporting Service Privilege Escalation Exploited
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Defender SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows MSHTML Platform Privilege Escalation Exploited
Windows MSHTML Platform Elevation of Privilege Vulnerability
- 8.4 High severity
Microsoft Streaming Service Untrusted Pointer Dereference Exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 4.4 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
TPM2.0: Out-of-bounds Write
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of s
- 7.8 High severity
Microsoft Windows Graphic Component Privilege Escalation Exploited
Windows Graphics Component Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Exploited
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Defender SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft Windows Scripting Languages Remote Code Execution Exploited
Windows Scripting Languages Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft Windows Print Spooler Remote Code Execution Exploited
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the
- 8.8 High severity
Microsoft WinVerifyTrust function Remote Code Execution Exploited
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo