Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 22H2

Is your version affected?

CVE Summary Score Published
CVE-2026-69553 Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026
CVE-2026-69541 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-69563 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-69549 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69540 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69574 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69534 Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility… 7.8 High Sep 8, 2026
CVE-2026-69524 Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-69539 Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-69582 Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69527 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69621 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69514 Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a… 7.5 High Sep 8, 2026
CVE-2026-69516 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69504 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69500 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69505 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69517 Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69531 Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to… 5.5 Medium Sep 8, 2026
CVE-2026-69495 Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a… 8.8 High Sep 8, 2026
CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69494 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69479 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally 8.4 High Sep 8, 2026
CVE-2026-69481 Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over… 8.0 High Sep 8, 2026

Other Microsoft products