Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs

3,303

CISA KEV

104

actively exploited

Public exploits

Exploited in wild

135

Severity breakdown

CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

SortPage 37 of 166

CVE-2023-23416P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14

CVE-2023-23416 [HIGH] CWE-20 CVE-2023-23416: Windows Cryptographic Services Remote Code Execution Vulnerability Windows Cryptographic Services Remote Code Execution Vulnerability

nvd

CVE-2024-38052P3HIGHCVSS 7.8fixed in 10.0.20348.2582≥ 10.0.20348.0, < 10.0.20348.25822024-07-09

CVE-2024-38052 [HIGH] CWE-20 CVE-2024-38052: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

nvd

CVE-2023-36400P3HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.21132023-11-14

CVE-2023-36400 [HIGH] CWE-122 CVE-2023-36400: Windows HMAC Key Derivation Elevation of Privilege Vulnerability Windows HMAC Key Derivation Elevation of Privilege Vulnerability

nvd

CVE-2022-22715P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.5242022-02-09

CVE-2022-22715 [HIGH] CWE-191 CVE-2022-22715: Named Pipe File System Elevation of Privilege Vulnerability Named Pipe File System Elevation of Privilege Vulnerability

nvd

CVE-2026-26128P3HIGHCVSS 7.8fixed in 10.0.20348.4830≥ 10.0.20348.0, < 10.0.20348.48932026-03-10

CVE-2026-26128 [HIGH] CWE-287 CVE-2026-26128: Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20864P3HIGHCVSS 7.8fixed in 10.0.20348.4648≥ 10.0.20348.0, < 10.0.20348.46482026-01-13

CVE-2026-20864 [HIGH] CWE-122 CVE-2026-20864: Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attac Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-54992P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-54992 [HIGH] CWE-122 CVE-2026-54992: Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-21239P3HIGHCVSS 7.8fixed in 10.0.20348.4711≥ 10.0.20348.0, < 10.0.20348.47732026-02-10

CVE-2026-21239 [HIGH] CWE-122 CVE-2026-21239: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2023-21539P3HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.14872023-01-10

CVE-2023-21539 [HIGH] CWE-125 CVE-2023-21539: Windows Authentication Remote Code Execution Vulnerability Windows Authentication Remote Code Execution Vulnerability

nvd

CVE-2024-38263P3HIGHCVSS 7.5fixed in 10.0.20348.2700≥ 10.0.20348.0, < 10.0.20348.27002024-09-10

CVE-2024-38263 [HIGH] CWE-591 CVE-2024-38263: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

nvd

CVE-2026-57091P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-57091 [HIGH] CWE-121 CVE-2026-57091: Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50489P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50489 [HIGH] CWE-122 CVE-2026-50489: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58547P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-58547 [HIGH] CWE-122 CVE-2026-58547: Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to el Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50332P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50332 [HIGH] CWE-122 CVE-2026-50332: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50680P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50680 [HIGH] CWE-122 CVE-2026-50680: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-35420P3HIGHCVSS 7.8fixed in 10.0.20348.5074≥ 10.0.20348.0, < 10.0.20348.51392026-05-12

CVE-2026-35420 [HIGH] CWE-122 CVE-2026-35420: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50477P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50477 [HIGH] CWE-122 CVE-2026-50477: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-56650P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-56650 [HIGH] CWE-122 CVE-2026-56650: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50484P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50484 [HIGH] CWE-122 CVE-2026-50484: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58538P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-58538 [HIGH] CWE-122 CVE-2026-58538: Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

nvd

← Previous37 / 166Next →