Known vulnerabilities in Microsoft Windows 11 22H2 10.0.22621.4890

Vendor: Microsoft
Software: Microsoft Windows
Version: 11 22H2 10.0.22621.4890
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 454
Public exploits: 28
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 11 22H2 10.0.22621.4890 Microsoft Windows 11 22H2 10.0.22621.4890 is affected by 454 vulnerabilities: 3 critical, 79 high, 84 medium, 287 low Critical High Medium Low

Vulnerabilities (454)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144402 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62727		 CWE-362 Low
No
No
 10 21H2 10.0.19044.7663, 10 22H2 10.0.19045.7663, 10 1607 10.0.14393.9418, 10 1809 10.0.17763.9121, 11 22H2 10.0.22621.7566, 11 24H2 10.0.26100.9168, 11 25H2 10.0.26200.9106, 11 25H2 10.0.26200.9168, 11 26H1 10.0.28000.2704 19.08.2026 SB20260819147
#VU132037 - Command injection
CVE-2026-45585		 CWE-77 Low
Public exploit available
No
 - 21.05.2026 SB2026052120
#VU131349 - Permissions, Privileges, and Access Controls
 CWE-264 Low
Public exploit available
No
 - 13.05.2026 SB2026051378
#VU119471 - Heap-based Buffer Overflow
CVE-2025-64679		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 21H2 10.0.19043.6575, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119470 - Heap-based Buffer Overflow
CVE-2025-64680		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU117285 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-55696		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015133
#VU117281 - Use After Free
CVE-2025-53768		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015130
#VU117278 - Cleartext Transmission of Sensitive Information
CVE-2025-53139		 CWE-319 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015126
#VU117235 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59284		 CWE-200 Medium
Public exploit available
No
 10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101592
#VU117233 - Use of a Key Past its Expiration Date
CVE-2025-48813		 CWE-324 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101590
#VU117230 - Buffer over-read
CVE-2025-59192		 CWE-126 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101587
#VU117228 - Use After Free
CVE-2025-55678		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101586
#VU117225 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59282		 CWE-362 Medium
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101584
#VU117224 - Use After Free
CVE-2025-59202		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101583
#VU117223 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59200		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101582
#VU117221 - Improper Authentication
CVE-2025-55340		 CWE-287 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101580
#VU117212 - Information Exposure Through Log Files
CVE-2025-59203		 CWE-532 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101571
#VU117206 - Information Exposure Through Log Files
CVE-2025-59197		 CWE-532 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101564
#VU117203 - Heap-based Buffer Overflow
CVE-2025-59295		 CWE-122 High
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101561
#VU117202 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59294		 CWE-200 Low
No
No
 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101560


Showing elements 1 - 20 out of 454