Skip to content

Known vulnerabilities in Microsoft Windows 10 Version 22H2

Is your version affected?

CVE Summary Score Published
CVE-2026-56648 Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to… 7.5 High Jul 14, 2026
CVE-2026-56194 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a… 8.8 High Jul 14, 2026
CVE-2026-54124 Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-56644 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-56643 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-56188 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network… 9.8 Critical Jul 14, 2026
CVE-2026-56189 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-56186 Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network 8.1 High Jul 14, 2026
CVE-2026-56184 Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose… 5.5 Medium Jul 14, 2026
CVE-2026-56190 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-56182 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-56175 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-56176 Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-56168 Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network 6.5 Medium Jul 14, 2026
CVE-2026-56173 Use after free in Windows WebView allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-50359 Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally 7.0 High Jul 14, 2026
CVE-2026-54126 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network 6.5 Medium Jul 14, 2026
CVE-2026-54128 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally 8.4 High Jul 14, 2026
CVE-2026-50690 Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-50692 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally 8.8 High Jul 14, 2026
CVE-2026-50689 Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally 7.8 High Jul 14, 2026
CVE-2026-54125 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an… 7.8 High Jul 14, 2026
CVE-2026-50686 Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to… 8.1 High Jul 14, 2026
CVE-2026-50682 Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network 7.1 High Jul 14, 2026
CVE-2026-50681 Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized… 5.5 Medium Jul 14, 2026

Other Microsoft products