cbcvebase.

Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

Page 46 of 166
CVE-2025-49723P3HIGHCVSS 8.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-49723 [HIGH] CWE-862 CVE-2025-49723: Missing authorization in Windows StateRepository API allows an authorized attacker to perform tamper Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
nvd
CVE-2022-26826P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-26826 [HIGH] CWE-77 CVE-2022-26826: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-35830P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.10062022-09-13
CVE-2022-35830 [HIGH] CVE-2022-35830: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-35767P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.8872022-08-09
CVE-2022-35767 [HIGH] CWE-94 CVE-2022-35767: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35766P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.8872022-08-09
CVE-2022-35766 [HIGH] CWE-94 CVE-2022-35766: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41081P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.11292022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-26812P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-26812 [HIGH] CVE-2022-26812: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-24536P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-24536 [HIGH] CVE-2022-24536: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26815P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-26815 [HIGH] CVE-2022-26815: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26813P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-26813 [HIGH] CVE-2022-26813: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-38000P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.11292022-10-11
CVE-2022-38000 [HIGH] CWE-362 CVE-2022-38000: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-22035P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.11292022-10-11
CVE-2022-22035 [HIGH] CWE-362 CVE-2022-22035: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21546P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21546 [HIGH] CWE-591 CVE-2023-21546: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21679P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21679 [HIGH] CWE-416 CVE-2023-21679: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21555P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21555 [HIGH] CWE-367 CVE-2023-21555: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21548P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21548 [HIGH] CWE-591 CVE-2023-21548: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2023-21535P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.14872023-01-10
CVE-2023-21535 [HIGH] CWE-591 CVE-2023-21535: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-44676P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.13662022-12-13
CVE-2022-44676 [HIGH] CWE-362 CVE-2022-44676: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41039P3HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.12492022-11-09
CVE-2022-41039 [HIGH] CWE-362 CVE-2022-41039: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2026-50429P3HIGHCVSS 8.2fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-50429 [HIGH] CWE-125 CVE-2026-50429: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
nvd
← Previous46 / 166Next →
Microsoft Windows Server 2022 vulnerabilities | cvebase