Microsoft: >> Windows 10 22h2 Security Vulnerabilities
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.012
Published
2026-09-08
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-09-08
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-09-08
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-09-08
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-09-08
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-09-08
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.005
Published
2026-09-08
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-09-08
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-09-08