Microsoft Windows Server 2022 vulnerabilities
3,303 known vulnerabilities affecting microsoft/windows_server_2022.
Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14
Vulnerabilities
Page 76 of 166
CVE-2025-49659P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-49659 [HIGH] CWE-126 CVE-2025-49659: Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49679P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-49679 [HIGH] CWE-197 CVE-2025-49679: Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locall
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50308P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-50308 [HIGH] CWE-122 CVE-2026-50308: Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute co
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-47996P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-47996 [HIGH] CWE-125 CVE-2025-47996: Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker
Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-48816P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-48816 [HIGH] CWE-125 CVE-2025-48816: Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileg
Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2022-41118P3HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.12492022-11-09
CVE-2022-41118 [HIGH] CWE-362 CVE-2022-41118: Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
nvd
CVE-2026-58609P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-58609 [HIGH] CWE-125 CVE-2026-58609: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code l
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26161P3HIGHCVSS 7.8fixed in 10.0.20348.5020≥ 10.0.20348.0, < 10.0.20348.50202026-04-14
CVE-2026-26161 [HIGH] CWE-20 CVE-2026-26161: Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevat
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49742P3HIGHCVSS 7.8fixed in 10.0.20348.3932≥ 10.0.20348.0, < 10.0.20348.39322025-07-08
CVE-2025-49742 [HIGH] CWE-122 CVE-2025-49742: Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to exec
Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.
nvd
CVE-2023-32022P3HIGHCVSS 7.6≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32022 [HIGH] CWE-285 CVE-2023-32022: Windows Server Service Security Feature Bypass Vulnerability
Windows Server Service Security Feature Bypass Vulnerability
nvd
CVE-2024-38239P3HIGHCVSS 7.2fixed in 10.0.20348.2700≥ 10.0.20348.0, < 10.0.20348.27002024-09-10
CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2026-50673P3HIGHCVSS 7.8fixed in 10.0.20348.5386≥ 10.0.20348.0, < 10.0.20348.53862026-07-14
CVE-2026-50673 [HIGH] CWE-367 CVE-2026-50673: Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges local
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-28232P3HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28232 [HIGH] CWE-362 CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-26234MEDIUMCVSS 6.7Exploited≥ 10.0.20348.0, < 10.0.20348.24022024-04-09
CVE-2024-26234 [MEDIUM] CWE-284 Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
cvelistv5
CVE-2024-38198P3HIGHCVSS 7.5fixed in 10.0.20348.2655≥ 10.0.20348.0, < 10.0.20348.26552024-08-13
CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2024-43456P3HIGHCVSS 7.4fixed in 10.0.20348.2762≥ 10.0.20348.0, < 10.0.20348.27622024-10-08
CVE-2024-43456 [HIGH] CWE-284 CVE-2024-43456: Windows Remote Desktop Services Tampering Vulnerability
Windows Remote Desktop Services Tampering Vulnerability
nvd
CVE-2026-35416P3HIGHCVSS 7.0fixed in 10.0.20348.5074≥ 10.0.20348.0, < 10.0.20348.51392026-05-12
CVE-2026-35416 [HIGH] CWE-416 CVE-2026-35416: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-33163P3HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.18502023-07-11
CVE-2023-33163 [HIGH] CWE-591 CVE-2023-33163: Windows Network Load Balancing Remote Code Execution Vulnerability
Windows Network Load Balancing Remote Code Execution Vulnerability
nvd
CVE-2025-62213P3HIGHCVSS 7.0fixed in 10.0.20348.4346≥ 10.0.20348.0, < 10.0.20348.44052025-11-11
CVE-2025-62213 [HIGH] CWE-416 CVE-2025-62213: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21235P3HIGHCVSS 7.3fixed in 10.0.20348.4711≥ 10.0.20348.0, < 10.0.20348.47732026-02-10
CVE-2026-21235 [HIGH] CWE-416 CVE-2026-21235: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd