cbcvebase.

Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

Page 147 of 166
CVE-2024-30038HIGHCVSS 7.8PoC≥ 10.0.20348.0, < 10.0.20348.24612024-05-14
CVE-2024-30038 [HIGH] CWE-122 Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-30148P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.7702022-06-15
CVE-2022-30148 [MEDIUM] CWE-532 CVE-2022-30148: Windows Desired State Configuration (DSC) Information Disclosure Vulnerability Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
nvd
CVE-2022-23281P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.5872022-03-09
CVE-2022-23281 [MEDIUM] CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2023-38160P4MEDIUMCVSS 5.5fixed in 10.0.20348.1970≥ 10.0.20348.0, < 10.0.20348.19702023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2022-22711P4MEDIUMCVSS 5.7≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-22711 [MEDIUM] CVE-2022-22711: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2023-21525P4MEDIUMCVSS 5.3≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2024-30096P4MEDIUMCVSS 5.5fixed in 10.0.20348.2522≥ 10.0.20348.0, < 10.0.20348.25272024-06-11
CVE-2024-30096 [MEDIUM] CWE-200 CVE-2024-30096: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-43546P4MEDIUMCVSS 5.6fixed in 10.0.20348.2762≥ 10.0.20348.0, < 10.0.20348.27622024-10-08
CVE-2024-43546 [MEDIUM] CWE-203 CVE-2024-43546: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6fixed in 10.0.20348.3091≥ 10.0.20348.0, < 10.0.20348.30912025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2022-21998P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2024-30016P4MEDIUMCVSS 5.5fixed in 10.0.20348.2461≥ 10.0.20348.0, < 10.0.20348.24612024-05-14
CVE-2024-30016 [MEDIUM] CWE-125 CVE-2024-30016: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2024-38056P4MEDIUMCVSS 5.5fixed in 10.0.20348.2582≥ 10.0.20348.0, < 10.0.20348.25822024-07-09
CVE-2024-38056 [MEDIUM] CWE-125 CVE-2024-38056: Microsoft Windows Codecs Library Information Disclosure Vulnerability Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2024-38055P4MEDIUMCVSS 5.5fixed in 10.0.20348.2582≥ 10.0.20348.0, < 10.0.20348.25822024-07-09
CVE-2024-38055 [MEDIUM] CWE-20 CVE-2024-38055: Microsoft Windows Codecs Library Information Disclosure Vulnerability Microsoft Windows Codecs Library Information Disclosure Vulnerability
nvd
CVE-2022-21985P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-26930P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.7072022-05-10
CVE-2022-26930 [MEDIUM] CVE-2022-26930: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-35831P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.10062022-09-13
CVE-2022-35831 [MEDIUM] CWE-125 CVE-2022-35831: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-43235P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.20348.4052021-12-15
CVE-2021-43235 [MEDIUM] CVE-2021-43235: Storage Spaces Controller Information Disclosure Vulnerability Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2021-43227P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.20348.4052021-12-15
CVE-2021-43227 [MEDIUM] CVE-2021-43227: Storage Spaces Controller Information Disclosure Vulnerability Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2022-24493P4MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-24493 [MEDIUM] CVE-2022-24493: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
nvd
CVE-2021-38636P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.20348.2302021-09-15
CVE-2021-38636 [MEDIUM] CVE-2021-38636: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
nvd
Microsoft Windows Server 2022 vulnerabilities | cvebase