# Microsoft Windows 10 22h2 vulnerabilities Source: https://junglewise.ai/threats/technologies/windows-10-22h2 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows-10-22h2.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 372 vulnerabilities in Microsoft Windows 10 22h2: 0 in the last 7 days and 172 in the last 90 days, 17 of them critical and 7 exploited in the wild. The most recent, CVE-2026-97844, was published on 13 October 2026. 171 vulnerabilities in the last four weeks, up from none in the four before. 9 critical against 0, 1 exploited in the wild against 0. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 172 - All time: 372 (17 critical, 7 exploited in the wild) ## About Microsoft Windows 10 22h2 Windows 10 operating system version 22H2. ## Latest Microsoft Windows 10 22h2 vulnerabilities - [CVE-2026-97844: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97844-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97843: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97843-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97842: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97842-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97841: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97841-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97840: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97839: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97838: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97837: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97836: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97835: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97834: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97833: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97833-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97832: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97831: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97831-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97829: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97829-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97828: DNS Server buffer over-read information disclosure](https://junglewise.ai/threats/cve-2026-97828-buffer-over-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97827: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97826: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97826-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97825: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97824: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97823: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97823-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97822: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97821: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97820: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97819: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97819-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) ## Most severe Microsoft Windows 10 22h2 vulnerabilities - [CVE-2026-96951: Microsoft Windows command injection in Shell](https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 13 Oct 2026) - [CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-21412-microsoft-windows-internet-shortcut-files-security-feature-bypass) (critical, exploited in the wild, CVSS 8.1, published 13 Feb 2024) - [CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-30400-microsoft-windows-dwm-core-library-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 13 May 2025) - [CVE-2025-21335: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-21335-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after) (critical, exploited in the wild, CVSS 7.8, published 14 Jan 2025) - [CVE-2025-21333: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-21333-microsoft-windows-hyper-v-nt-kernel-integration-vsp-heap-based) (critical, exploited in the wild, CVSS 7.8, published 14 Jan 2025) - [CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability](https://junglewise.ai/threats/cve-2024-21338-microsoft-windows-kernel-exposed-ioctl-with-insufficient-access) (critical, exploited in the wild, CVSS 7.8, published 4 Mar 2024) - [CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after) (critical, exploited in the wild, CVSS 7, published 11 Aug 2026) - [CVE-2026-97814: Windows Text Shaping heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-97805: Windows Partition Management Driver out-of-bounds read](https://junglewise.ai/threats/cve-2026-97805-out-of-bounds-read-in-windows-partition-management-driver-allows) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-97816: OpenSSH for Windows use-after-free remote code execution](https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized) (critical, CVSS 9.8, published 13 Oct 2026) ## Vulnerabilities per week 171 vulnerabilities in the last four weeks, up from none in the four before. 9 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 171 | 9 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows 10 22h2 vulnerabilities", https://junglewise.ai/threats/technologies/windows-10-22h2, 13 November 2026.