Windows 10 Version 22H2
- Software type
- Operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/09/2026, Windows 10 Version 22H2 recorded 685 security vulnerabilities in the last 90 days, of which 525 are rated High or Critical. Notably, 2 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Windows 10 Version 22H2 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-26155Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityCVE-2026-26153Windows Encrypted File System (EFS) Elevation of Privilege VulnerabilityCVE-2026-26152Microsoft Cryptographic Services Elevation of Privilege VulnerabilityCVE-2026-26151Remote Desktop Spoofing VulnerabilityCVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-26155Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-26153Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-26152Microsoft Cryptographic Services Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-26151Remote Desktop Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-20930Windows Management Services Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-20928Windows Recovery Environment Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-20806Windows COM Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-26132Windows Kernel Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-26128Windows SMB Server Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-26111Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25190Windows GDI Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25188Windows Telephony Service Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25187Winlogon Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25186Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-25185Windows Shell Link Processing Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-25181GDI+ Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25180Windows Graphics Component Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-25179Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25178Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25177Active Directory Domain Services Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25176Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25175Windows NTFS Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25174Windows Extensible File Allocation Table Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25173Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25172Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25171Windows Authentication Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-25169Windows Graphics Component Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-25168Windows Graphics Component Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-25165Performance Counters for Windows Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24296Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24295Windows Device Association Service Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24294Windows SMB Server Elevation of Privilege Vulnerability | Exploitation statusActively exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24293Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24292Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24291Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24290Windows Projected File System Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24289Windows Kernel Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24287Windows Kernel Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24285Win32k Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-24282Push message Routing Service Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityMedium |
|---|
CVE-2026-23674MapUrlToZone Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23673Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23672Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23671Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23669RPC Runtime Library Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23668Windows Graphics Component Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-23667Broadcast DVR Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-21533Windows Remote Desktop Services Elevation of Privilege Vulnerability | Exploitation statusKEV | FixYes | Published02/10/2026 | SeverityHigh |
|---|
CVE-2026-21525Windows Remote Access Connection Manager Denial of Service Vulnerability | Exploitation statusKEV | FixYes | Published02/10/2026 | SeverityMedium |
|---|
1,889 Results | Page 18 of 38