cbcvebase.

Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

Page 62 of 166
CVE-2026-58539P3HIGHCVSS 7.5fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-58539 [HIGH] CWE-125 CVE-2026-58539: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2022-22034P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-22034 [HIGH] CWE-416 CVE-2022-22034: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2025-29831P3HIGHCVSS 7.5fixed in 10.0.20348.3692≥ 10.0.20348.0, < 10.0.20348.36922025-05-13
CVE-2025-29831 [HIGH] CWE-416 CVE-2025-29831: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-27913P3HIGHCVSS 7.7fixed in 10.0.20348.5020≥ 10.0.20348.0, < 10.0.20348.50202026-04-14
CVE-2026-27913 [HIGH] CWE-20 CVE-2026-27913: Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-49788P3HIGHCVSS 7.5fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-49788 [HIGH] CWE-770 CVE-2026-49788: Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-50463P3HIGHCVSS 7.5fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-50463 [HIGH] CWE-125 CVE-2026-50463: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-57979P3HIGHCVSS 7.5fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-57979 [HIGH] CWE-125 CVE-2026-57979: Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2022-35751P3HIGHCVSS 7.8fixed in 10.0.20348.887≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35751 [HIGH] CVE-2022-35751: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2026-20844P3HIGHCVSS 7.4fixed in 10.0.20348.4648≥ 10.0.20348.0, < 10.0.20348.46482026-01-13
CVE-2026-20844 [HIGH] CWE-362 CVE-2026-20844: Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges loc Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-32156P3HIGHCVSS 7.4fixed in 10.0.20348.5020≥ 10.0.20348.0, < 10.0.20348.50202026-04-14
CVE-2026-32156 [HIGH] CWE-416 CVE-2026-32156: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.
nvd
CVE-2022-22000P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-22000 [HIGH] CVE-2022-22000: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-30394P3MEDIUMCVSS 5.9fixed in 10.0.20348.3692≥ 10.0.20348.0, < 10.0.20348.36922025-05-13
CVE-2025-30394 [MEDIUM] CWE-591 CVE-2025-30394: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unaut Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
nvd
CVE-2022-35761P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872022-08-09
CVE-2022-35761 [HIGH] CWE-269 CVE-2022-35761: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-21420P3HIGHCVSS 7.8fixed in 10.0.20348.3207≥ 10.0.20348.0, < 10.0.20348.32072025-02-11
CVE-2025-21420 [HIGH] CWE-59 CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
nvd
CVE-2023-21812P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.15472023-02-14
CVE-2023-21812 [HIGH] CWE-122 CVE-2023-21812: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-30035P3HIGHCVSS 7.8fixed in 10.0.20348.2461≥ 10.0.20348.0, < 10.0.20348.24612024-05-14
CVE-2024-30035 [HIGH] CWE-416 CVE-2024-30035: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-22026P3HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-22026 [HIGH] CWE-787 CVE-2022-22026: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2026-35422P3MEDIUMCVSS 6.5fixed in 10.0.20348.5074≥ 10.0.20348.0, < 10.0.20348.51392026-05-12
CVE-2026-35422 [MEDIUM] CWE-288 CVE-2026-35422: Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized atta Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2024-38147P3HIGHCVSS 7.8fixed in 10.0.20348.2655≥ 10.0.20348.0, < 10.0.20348.26552024-08-13
CVE-2024-38147 [HIGH] CWE-416 CVE-2024-38147: Microsoft DWM Core Library Elevation of Privilege Vulnerability Microsoft DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2023-35364P3HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.18502023-07-11
CVE-2023-35364 [HIGH] CWE-190 CVE-2023-35364: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
← Previous62 / 166Next →
Microsoft Windows Server 2022 vulnerabilities | cvebase