Microsoft Windows Server 2022 vulnerabilities
3,303 known vulnerabilities affecting microsoft/windows_server_2022.
Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
135
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14
Vulnerabilities
Page 1 of 166
CVE-2025-59287P1CRITICALCVSS 9.8KEVPoCRansomwarefixed in 10.0.20348.4297≥ 10.0.20348.0, < 10.0.20348.42972025-10-14
CVE-2025-59287 [CRITICAL] CWE-502 CVE-2025-59287: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker t
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-34527P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.20348.230≥ 10.0.0, < 10.0.20348.2302021-07-02
CVE-2021-34527 [HIGH] CVE-2021-34527: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
UPDAT
nvd
CVE-2025-33073P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.20348.3745≥ 10.0.20348.0, < 10.0.20348.38072025-06-10
CVE-2025-33073 [HIGH] CWE-284 CVE-2025-33073: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a ne
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2022-26923P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.20348.1668≥ 10.0.20348.0, < 10.0.20348.16682022-05-10
CVE-2022-26923 [HIGH] CWE-295 CVE-2022-26923: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomwarefixed in 10.0.20348.2322≥ 10.0.20348.0, < 10.0.20348.23222024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2021-40444P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.20348.230≥ 10.0.0, < 10.0.20348.2302021-09-15
CVE-2021-40444 [HIGH] CWE-22 CVE-2021-40444: <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affect
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.
An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that
nvd
CVE-2023-36025P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.20348.2113≥ 10.0.20348.0, < 10.0.20348.21132023-11-14
CVE-2023-36025 [HIGH] CVE-2023-36025: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2021-42287P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.20348.350≥ 10.0.0, < 10.0.20348.3502021-11-10
CVE-2021-42287 [HIGH] CVE-2021-42287: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2023-36884P1HIGHCVSS 7.5KEVPoCRansomwarefixed in 10.0.20348.1903≥ 10.0.20348.0, < 10.0.20348.19062023-07-11
CVE-2023-36884 [HIGH] CWE-362 CVE-2023-36884: Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
nvd
CVE-2025-33053P1HIGHCVSS 8.8KEVPoCfixed in 10.0.20348.3745≥ 10.0.20348.0, < 10.0.20348.38072025-06-10
CVE-2025-33053 [HIGH] CWE-73 CVE-2025-33053: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-30190P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.20348.770≥ 10.0.20348.0, < 10.0.20348.7702022-06-01
CVE-2022-30190 [HIGH] CVE-2022-30190: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calli
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the cont
nvd
CVE-2021-42278P1HIGHCVSS 7.5KEVPoCRansomwarefixed in 10.0.20348.350≥ 10.0.0, < 10.0.20348.3502021-11-10
CVE-2021-42278 [HIGH] CVE-2021-42278: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.20348.2322≥ 10.0.20348.0, < 10.0.20348.23222024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30088P1HIGHCVSS 7.0KEVPoCRansomwarefixed in 10.0.20348.2522≥ 10.0.20348.0, < 10.0.20348.25272024-06-11
CVE-2024-30088 [HIGH] CWE-367 CVE-2024-30088: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28252P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28252 [HIGH] CWE-122 CVE-2023-28252: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21999P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.20348.524≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-21999 [HIGH] CWE-22 CVE-2022-21999: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2013-3900P1HIGHCVSS 8.8KEVPoCRansomwarevN/A2013-12-11
CVE-2013-3900 [HIGH] CWE-347 CVE-2013-3900: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Upd
Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, ex
nvd
CVE-2022-37969P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.20348.1006≥ 10.0.20348.0, < 10.0.20348.10062022-09-13
CVE-2022-37969 [HIGH] CWE-787 CVE-2022-37969: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21674P1HIGHCVSS 8.8KEVPoCfixed in 10.0.20348.1487≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21674 [HIGH] CWE-416 CVE-2023-21674: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-21971P1HIGHCVSS 7.8KEVPoCfixed in 10.0.20348.524≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-21971 [HIGH] CWE-824 CVE-2022-21971: Windows Runtime Remote Code Execution Vulnerability
Windows Runtime Remote Code Execution Vulnerability
nvd
1 / 166Next →