Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs

3,303

CISA KEV

104

actively exploited

Public exploits

Exploited in wild

136

Severity breakdown

CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

SortPage 66 of 166

CVE-2025-54111P3HIGHCVSS 7.8fixed in 10.0.20348.4106≥ 10.0.20348.0, < 10.0.20348.41712025-09-09

CVE-2025-54111 [HIGH] CWE-416 CVE-2025-54111: Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate pr Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40404P3HIGHCVSS 7.8fixed in 10.0.20348.5256≥ 10.0.20348.0, < 10.0.20348.52562026-06-09

CVE-2026-40404 [HIGH] CWE-122 CVE-2026-40404: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-25175P3HIGHCVSS 7.8fixed in 10.0.20348.4830≥ 10.0.20348.0, < 10.0.20348.48932026-03-10

CVE-2026-25175 [HIGH] CWE-125 CVE-2026-25175: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49726P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08

CVE-2025-49726 [HIGH] CWE-416 CVE-2025-49726: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-24290P3HIGHCVSS 7.8fixed in 10.0.20348.4830≥ 10.0.20348.0, < 10.0.20348.48932026-03-10

CVE-2026-24290 [HIGH] CWE-284 CVE-2026-24290: Improper access control in Windows Projected File System allows an authorized attacker to elevate pr Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-26687P3HIGHCVSS 7.5fixed in 10.0.20348.3453≥ 10.0.20348.0, < 10.0.20348.34532025-04-08

CVE-2025-26687 [HIGH] CWE-416 CVE-2025-26687: Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

nvd

CVE-2026-42837P3HIGHCVSS 7.8fixed in 10.0.20348.5256≥ 10.0.20348.0, < 10.0.20348.52562026-06-09

CVE-2026-42837 [HIGH] CWE-125 CVE-2026-42837: Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to e Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-42828P3HIGHCVSS 7.8fixed in 10.0.20348.5256≥ 10.0.20348.0, < 10.0.20348.52562026-06-09

CVE-2026-42828 [HIGH] CWE-126 CVE-2026-42828: Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to ele Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50647P3HIGHCVSS 7.5fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50647 [HIGH] CWE-835 CVE-2026-50647: Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-50422P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50422 [HIGH] CWE-125 CVE-2026-50422: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50357P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50357 [HIGH] CWE-197 CVE-2026-50357: Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

nvd

CVE-2026-54115P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-54115 [HIGH] CWE-122 CVE-2026-54115: Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40409P3HIGHCVSS 7.8fixed in 10.0.20348.5256≥ 10.0.20348.0, < 10.0.20348.52562026-06-09

CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-45592P3HIGHCVSS 7.8fixed in 10.0.20348.5256≥ 10.0.20348.0, < 10.0.20348.52562026-06-09

CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26153P3HIGHCVSS 7.8fixed in 10.0.20348.5020≥ 10.0.20348.0, < 10.0.20348.50202026-04-14

CVE-2026-26153 [HIGH] CWE-125 CVE-2026-26153: Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49665P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08

CVE-2025-49665 [HIGH] CWE-362 CVE-2025-49665: Concurrent execution using shared resource with improper synchronization ('race condition') in Works Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49733P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08

CVE-2025-49733 [HIGH] CWE-416 CVE-2025-49733: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49725P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08

CVE-2025-49725 [HIGH] CWE-416 CVE-2025-49725: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50335P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50335 [HIGH] CWE-284 CVE-2026-50335: Improper access control in Windows Operating Systems allows an authorized attacker to elevate privil Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50346P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14

CVE-2026-50346 [HIGH] CWE-285 CVE-2026-50346: Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

nvd

← Previous66 / 166Next →