cbcvebase.

Microsoft Windows Server 2022 vulnerabilities

3,303 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14

Vulnerabilities

Page 73 of 166
CVE-2022-38016P3HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.11292022-10-11
CVE-2022-38016 [HIGH] CVE-2022-38016: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
nvd
CVE-2023-32009P3HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32009 [HIGH] CWE-284 CVE-2023-32009: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
nvd
CVE-2024-21371P3HIGHCVSS 7.0fixed in 10.0.20348.2322≥ 10.0.20348.0, < 10.0.20348.23222024-02-13
CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-21878P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.4692022-01-11
CVE-2022-21878 [HIGH] CVE-2022-21878: Windows Geolocation Service Remote Code Execution Vulnerability Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2022-21992P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.5242022-02-09
CVE-2022-21992 [HIGH] CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability Windows Mobile Device Management Remote Code Execution Vulnerability
nvd
CVE-2022-29115P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.7072022-05-10
CVE-2022-29115 [HIGH] CVE-2022-29115: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-21913P3HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.4692022-01-11
CVE-2022-21913 [HIGH] CVE-2022-21913: Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
nvd
CVE-2022-22027P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-22027 [HIGH] CVE-2022-22027: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2024-43584P3HIGHCVSS 8.4fixed in 10.0.20348.2762≥ 10.0.20348.0, < 10.0.20348.27622024-10-08
CVE-2024-43584 [HIGH] CWE-693 CVE-2024-43584: Windows Scripting Engine Security Feature Bypass Vulnerability Windows Scripting Engine Security Feature Bypass Vulnerability
nvd
CVE-2022-22024P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-22024 [HIGH] CVE-2022-22024: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2023-35317P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.18502023-07-11
CVE-2023-35317 [HIGH] CWE-502 CVE-2023-35317: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
nvd
CVE-2023-36407P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.21132023-11-14
CVE-2023-36407 [HIGH] CWE-20 CVE-2023-36407: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2026-23668P3HIGHCVSS 7.0fixed in 10.0.20348.4830≥ 10.0.20348.0, < 10.0.20348.48932026-03-10
CVE-2026-23668 [HIGH] CWE-362 CVE-2026-23668: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49805P3HIGHCVSS 7.0fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-49805 [HIGH] CWE-284 CVE-2026-49805: Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27473P3HIGHCVSS 7.5fixed in 10.0.20348.3453≥ 10.0.20348.0, < 10.0.20348.34532025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-38184P3HIGHCVSS 7.8fixed in 10.0.20348.2582≥ 10.0.20348.0, < 10.0.20348.25822024-08-13
CVE-2024-38184 [HIGH] CWE-125 CVE-2024-38184: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-30164P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.7702022-06-15
CVE-2022-30164 [HIGH] CVE-2022-30164: Kerberos AppContainer Security Feature Bypass Vulnerability Kerberos AppContainer Security Feature Bypass Vulnerability
nvd
CVE-2023-36047P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.21132023-11-14
CVE-2023-36047 [HIGH] CWE-59 CVE-2023-36047: Windows Authentication Elevation of Privilege Vulnerability Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2024-49090P3HIGHCVSS 7.8fixed in 10.0.20348.2966≥ 10.0.20348.0, < 10.0.20348.29662024-12-12
CVE-2024-49090 [HIGH] CWE-822 CVE-2024-49090: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49088P3HIGHCVSS 7.8fixed in 10.0.20348.2966≥ 10.0.20348.0, < 10.0.20348.29662024-12-12
CVE-2024-49088 [HIGH] CWE-126 CVE-2024-49088: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
← Previous73 / 166Next →
Microsoft Windows Server 2022 vulnerabilities | cvebase