Windows 10 Version 22H2 vulnerabilities
376 known vulnerabilities in Windows 10 Version 22H2 from Microsoft. 361 are rated high or critical, and 83 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 8.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
- 8.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
- 8.8 High severity
Windows 10 Version 1507: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
- 7.0 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Windows 10 Version 1507: Exposure of Sensitive Information to an Unauthorized Actor
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1809: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Heap-based Buffer Overflow
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.4 High severity
Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Windows 10 Version 1507: Improper Link Resolution Before File Access
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
- 7.1 High severity
Windows 10 Version 1507: Sensitive Data Storage in Improperly Locked Memory
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.
- 7.5 High severity
Windows 10 Version 1607: Missing Authentication for Critical Functionality
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network.
- 8.0 High severity
Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.
- 8.8 High severity
Microsoft Windows SMB Client Improper Access Control Exploited
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
- 8.8 High severity
Microsoft Windows External Control of File Name or Path Exploited
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- 7.3 High severity
Windows 10 Version 1507: Improper Link Resolution Before File Access
Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Exploited
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Exploited
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows DWM Core Library Use-After-Free Exploited
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Microsoft Windows Scripting Engine Type Confusion Exploited
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
- 7.0 High severity
Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Windows 10 Version 1507: Sensitive Data Storage in Improperly Locked Memory
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.0 High severity
Windows 10 Version 1507: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Microsoft Windows Management Console (MMC) Improper Neutralization Exploited
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- 7.8 High severity
Microsoft Windows NTFS Heap-Based Buffer Overflow Exploited
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- 5.5 Medium severity
Microsoft Windows NTFS Out-Of-Bounds Read Exploited
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 7.8 High severity
Microsoft Windows Fast FAT File System Driver Integer Overflow Exploited
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
- 4.6 Medium severity
Microsoft Windows NTFS Information Disclosure Exploited
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- 5.4 Medium severity
Microsoft Windows NTLM Hash Disclosure Spoofing Exploited
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.