Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 22H2

Is your version affected?

CVE Summary Score Published
CVE-2026-59130 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally 5.6 Medium Aug 11, 2026
CVE-2026-59132 Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network 7.5 High Aug 11, 2026
CVE-2026-59127 Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-59128 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-54984 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally 7.8 High Aug 11, 2026
CVE-2026-49179 Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows… 8.8 High Aug 11, 2026
CVE-2026-54113 Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service… 7.5 High Aug 11, 2026
CVE-2026-56174 Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-50472 Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-58598 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine… 7.0 High Jul 16, 2026
CVE-2026-58638 Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally 6.0 Medium Jul 14, 2026
CVE-2026-58637 Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-58632 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-58629 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-58628 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless… 7.8 High Jul 14, 2026
CVE-2026-58626 Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network 8.8 High Jul 14, 2026
CVE-2026-58619 Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-58613 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-58594 Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network 8.8 High Jul 14, 2026
CVE-2026-58541 Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate… 7.8 High Jul 14, 2026
CVE-2026-58545 Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally 5.5 Medium Jul 14, 2026
CVE-2026-58536 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability 5.5 Medium Jul 14, 2026
CVE-2026-58534 Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges… 8.8 High Jul 14, 2026
CVE-2026-58531 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an… 7.5 High Jul 14, 2026

Other Microsoft products