InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product microsoft:windows_10_22h2. Show all products

2,562 CVEs, showing 1 to 50Page 1 of 52Next
CVESeverityTitlePublished
CVE-2013-3900
Known exploited
Medium 5.5WinVerifyTrust Signature Validation Vulnerability
Assigned by microsoft
Dec 11, 2013
CVE-2021-34527
Known exploited
High 8.8Windows Print Spooler Remote Code Execution Vulnerability
Assigned by microsoft
Jul 2, 2021
CVE-2022-41128
Known exploited
High 8.8Windows Scripting Languages Remote Code Execution Vulnerability
Assigned by microsoft
Nov 9, 2022
CVE-2022-41125
Known exploited
High 7.8Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 9, 2022
CVE-2022-41091
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Nov 9, 2022
CVE-2022-41073
Known exploited
High 7.8Windows Print Spooler Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 9, 2022
CVE-2022-41049
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Nov 9, 2022
CVE-2022-44698
Known exploited
Medium 5.4Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Dec 13, 2022
CVE-2023-21674
Known exploited
High 8.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Assigned by microsoft
Jan 10, 2023
CVE-2023-23376
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Feb 14, 2023
CVE-2023-21823
Known exploited
High 7.8Windows Graphics Component Remote Code Execution Vulnerability
Assigned by microsoft
Feb 14, 2023
CVE-2023-24880
Known exploited
Medium 4.4Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Mar 14, 2023
CVE-2023-28229
Known exploited
High 7.0Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Assigned by microsoft
Apr 11, 2023
CVE-2023-28252
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Apr 11, 2023
CVE-2023-29360
Known exploited
High 8.4Microsoft Streaming Service Elevation of Privilege Vulnerability
Assigned by microsoft
Jun 13, 2023
CVE-2023-32046
Known exploited
High 7.8Windows MSHTML Platform Elevation of Privilege Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-32049
Known exploited
High 8.8Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-36874
Known exploited
High 7.8Windows Error Reporting Service Elevation of Privilege Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-36884
Known exploited
High 7.5Windows Search Remote Code Execution Vulnerability
Assigned by microsoft
Jul 11, 2023
CVE-2023-36802
Known exploited
High 7.8Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Assigned by microsoft
Sep 12, 2023
CVE-2023-44487
Known exploited
High 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Assigned by mitre
Oct 10, 2023
CVE-2023-36584
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Oct 10, 2023
CVE-2023-36563
Known exploited
Medium 6.5Microsoft WordPad Information Disclosure Vulnerability
Assigned by microsoft
Oct 10, 2023
CVE-2023-36424
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36036
Known exploited
High 7.8Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36033
Known exploited
High 7.8Windows DWM Core Library Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2023-36025
Known exploited
High 8.8Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Nov 14, 2023
CVE-2024-21338
Known exploited
High 7.8Windows Kernel Elevation of Privilege Vulnerability
Assigned by microsoft
Feb 13, 2024
CVE-2024-21351
Known exploited
High 7.6Windows SmartScreen Security Feature Bypass Vulnerability
Assigned by microsoft
Feb 13, 2024
CVE-2024-21412
Known exploited
High 8.1Internet Shortcut Files Security Feature Bypass Vulnerability
Assigned by microsoft
Feb 13, 2024
CVE-2024-26169
Known exploited
High 7.8Windows Error Reporting Service Elevation of Privilege Vulnerability
Assigned by microsoft
Mar 12, 2024
CVE-2024-29988
Known exploited
High 8.8SmartScreen Prompt Security Feature Bypass Vulnerability
Assigned by microsoft
Apr 9, 2024
CVE-2024-30040
Known exploited
High 8.8Windows MSHTML Platform Security Feature Bypass Vulnerability
Assigned by microsoft
May 14, 2024
CVE-2024-30051
Known exploited
High 7.8Windows DWM Core Library Elevation of Privilege Vulnerability
Assigned by microsoft
May 14, 2024
CVE-2024-35250
Known exploited
High 7.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Jun 11, 2024
CVE-2024-30088
Known exploited
High 7.0Windows Kernel Elevation of Privilege Vulnerability
Assigned by microsoft
Jun 11, 2024
CVE-2024-38112
Known exploited
High 7.5Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Jul 9, 2024
CVE-2024-38178
Known exploited
High 7.5Scripting Engine Memory Corruption Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38193
Known exploited
High 7.8Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38213
Known exploited
Medium 6.5Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38106
Known exploited
High 7.0Windows Kernel Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38107
Known exploited
High 7.8Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 13, 2024
CVE-2024-38014
Known exploited
High 7.8Windows Installer Elevation of Privilege Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-38217
Known exploited
Medium 5.4Windows Mark of the Web Security Feature Bypass Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-43461
Known exploited
High 8.8Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Sep 10, 2024
CVE-2024-43573
Known exploited
Medium 6.5Windows MSHTML Platform Spoofing Vulnerability
Assigned by microsoft
Oct 8, 2024
CVE-2024-43572
Known exploited
High 7.8Microsoft Management Console Remote Code Execution Vulnerability
Assigned by microsoft
Oct 8, 2024
CVE-2024-43451
Known exploited
Medium 6.5NTLM Hash Disclosure Spoofing Vulnerability
Assigned by microsoft
Nov 12, 2024
CVE-2024-49039
Known exploited
High 8.8Windows Task Scheduler Elevation of Privilege Vulnerability
Assigned by microsoft
Nov 12, 2024
CVE-2024-49138
Known exploited
High 7.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
Assigned by microsoft
Dec 10, 2024
Page 1 of 52Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.