Microsoft Windows Server 2022 vulnerabilities

2,817 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs

2,817

CISA KEV

102

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL74HIGH2015MEDIUM717LOW11

Vulnerabilities

Page 41 of 141

CVE-2025-24061HIGHCVSS 7.8fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24061 [HIGH] CWE-693 CVE-2025-24061: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

nvd

CVE-2025-24995HIGHCVSS 7.8fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24995 [HIGH] CWE-122 CVE-2025-24995: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacke Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24066HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24066 [HIGH] CWE-122 CVE-2025-24066: Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24084HIGHCVSS 8.4fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24084 [HIGH] CWE-822 CVE-2025-24084: Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to exec Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-24072HIGHCVSS 7.8fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24072 [HIGH] CWE-416 CVE-2025-24072: Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker t Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24046HIGHCVSS 7.8fixed in 10.0.20348.3270fixed in 10.0.20348.3328+1 more2025-03-11

CVE-2025-24046 [HIGH] CWE-416 CVE-2025-24046: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24055MEDIUMCVSS 4.3fixed in 10.0.20348.3270fixed in 10.0.20348.3328+1 more2025-03-11

CVE-2025-24055 [MEDIUM] CWE-125 CVE-2025-24055: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

nvd

CVE-2025-24991MEDIUMCVSS 5.5KEVfixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24991 [MEDIUM] CWE-125 CVE-2025-24991: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

nvd

CVE-2025-24054MEDIUMCVSS 5.4KEVPoCfixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24054 [MEDIUM] CWE-73 CVE-2025-24054: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2025-24992MEDIUMCVSS 5.5fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24992 [MEDIUM] CWE-126 CVE-2025-24992: Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

nvd

CVE-2025-24997MEDIUMCVSS 4.4fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24997 [MEDIUM] CWE-476 CVE-2025-24997: Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service loca Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

nvd

CVE-2025-24987MEDIUMCVSS 6.8fixed in 10.0.20348.3328≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24987 [MEDIUM] CWE-125 CVE-2025-24987: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

nvd

CVE-2025-21247MEDIUMCVSS 4.3fixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-21247 [MEDIUM] CWE-41 CVE-2025-21247: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

nvd

CVE-2025-24984MEDIUMCVSS 4.6KEVfixed in 10.0.20348.3270≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24984 [MEDIUM] CWE-532 CVE-2025-24984: Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

nvd

CVE-2025-24071MEDIUMCVSS 6.5PoCfixed in 10.0.20348.3328≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24071 [MEDIUM] CWE-200 CVE-2025-24071: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2025-24988MEDIUMCVSS 6.8fixed in 10.0.20348.3328≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24988 [MEDIUM] CWE-125 CVE-2025-24988: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

nvd

CVE-2025-24996MEDIUMCVSS 6.5fixed in 10.0.20348.3328≥ 10.0.20348.0, < 10.0.20348.33282025-03-11

CVE-2025-24996 [MEDIUM] CWE-73 CVE-2025-24996: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2025-21407HIGHCVSS 8.8fixed in 10.0.20348.3207≥ 10.0.20348.0, < 10.0.20348.32072025-02-11

CVE-2025-21407 [HIGH] CWE-122 CVE-2025-21407: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability

nvd

CVE-2025-21359HIGHCVSS 7.8fixed in 10.0.20348.3207≥ 10.0.20348.0, < 10.0.20348.32072025-02-11

CVE-2025-21359 [HIGH] CWE-284 CVE-2025-21359: Windows Kernel Security Feature Bypass Vulnerability Windows Kernel Security Feature Bypass Vulnerability

nvd

CVE-2025-21414HIGHCVSS 7.0fixed in 10.0.20348.3207≥ 10.0.20348.0, < 10.0.20348.32072025-02-11

CVE-2025-21414 [HIGH] CWE-122 CVE-2025-21414: Windows Core Messaging Elevation of Privileges Vulnerability Windows Core Messaging Elevation of Privileges Vulnerability

nvd

← Previous41 / 141Next →