cbcvebase.

Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

Page 155 of 166
CVE-2026-57085P4LOWCVSS 3.3fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2022-21977P4LOWCVSS 3.3≥ 10.0.20348.0, < 10.0.20348.5872022-03-09
CVE-2022-21977 [LOW] CVE-2022-21977: Media Foundation Information Disclosure Vulnerability Media Foundation Information Disclosure Vulnerability
nvd
CVE-2024-38030MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.25822024-07-09
CVE-2024-38030 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability Windows Themes Spoofing Vulnerability Windows Themes Spoofing Vulnerability
cvelistv5
CVE-2022-35748HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35748 [HIGH] HTTP.sys Denial of Service Vulnerability HTTP.sys Denial of Service Vulnerability HTTP.sys Denial of Service Vulnerability
cvelistv5
CVE-2024-26217P4LOWCVSS 3.3≥ 10.0.20348.0, < 10.0.20348.24612024-04-09
CVE-2024-26217 [LOW] CWE-125 CVE-2024-26217: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2021-26414MEDIUMCVSS 4.8≥ 10.0.0, < 10.0.20348.16072021-06-08
CVE-2021-26414 [MEDIUM] Windows DCOM Server Security Feature Bypass Windows DCOM Server Security Feature Bypass Windows DCOM Server Security Feature Bypass
cvelistv5
CVE-2022-34689HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.8872022-10-11
CVE-2022-34689 [HIGH] Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability
cvelistv5
CVE-2024-30081HIGHCVSS 7.1≥ 10.0.20348.0, < 10.0.20348.25822024-07-09
CVE-2024-30081 [HIGH] CWE-200 Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability Windows NTLM Spoofing Vulnerability
cvelistv5
CVE-2025-21377MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.32072025-02-11
CVE-2025-21377 [MEDIUM] CWE-73 NTLM Hash Disclosure Spoofing Vulnerability NTLM Hash Disclosure Spoofing Vulnerability NTLM Hash Disclosure Spoofing Vulnerability
cvelistv5
CVE-2025-21312P4LOWCVSS 2.4fixed in 10.0.20348.3091≥ 10.0.20348.0, < 10.0.20348.30912025-01-14
CVE-2025-21312 [LOW] CWE-908 CVE-2025-21312: Windows Smart Card Reader Information Disclosure Vulnerability Windows Smart Card Reader Information Disclosure Vulnerability
nvd
CVE-2023-41772HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.20312023-10-10
CVE-2023-41772 [HIGH] CWE-284 Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-34729HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.10062022-09-13
CVE-2022-34729 [HIGH] Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-30087HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.25272024-06-11
CVE-2024-30087 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-36731HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.20312023-10-10
CVE-2023-36731 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-23299HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.5872022-03-09
CVE-2022-23299 [HIGH] Windows PDEV Elevation of Privilege Vulnerability Windows PDEV Elevation of Privilege Vulnerability Windows PDEV Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-38050HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.11292022-10-11
CVE-2022-38050 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-35750HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35750 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-36970HIGHCVSS 8.8≥ 10.0.0, < 10.0.20348.2882021-10-13
CVE-2021-36970 [HIGH] Windows Print Spooler Spoofing Vulnerability Windows Print Spooler Spoofing Vulnerability Windows Print Spooler Spoofing Vulnerability
cvelistv5
CVE-2023-29371HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29371 [HIGH] CWE-20 Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-29358HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29358 [HIGH] CWE-416 Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5
← Previous155 / 166Next →
Microsoft Windows Server 2022 vulnerabilities | cvebase