Microsoft Windows Server 2022 vulnerabilities
3,303 known vulnerabilities affecting microsoft/windows_server_2022.
Total CVEs
3,303
CISA KEV
104
actively exploited
Public exploits
75
Exploited in wild
136
Severity breakdown
CRITICAL99HIGH2369MEDIUM821LOW14
Vulnerabilities
Page 77 of 166
CVE-2025-54911P3HIGHCVSS 7.3fixed in 10.0.20348.4106≥ 10.0.20348.0, < 10.0.20348.41712025-09-09
CVE-2025-54911 [HIGH] CWE-416 CVE-2025-54911: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32149P3HIGHCVSS 7.3fixed in 10.0.20348.5020≥ 10.0.20348.0, < 10.0.20348.50202026-04-14
CVE-2026-32149 [HIGH] CWE-20 CVE-2026-32149: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2021-26435P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.20348.2302021-09-15
CVE-2021-26435 [HIGH] CWE-787 CVE-2021-26435: Windows Scripting Engine Memory Corruption Vulnerability
Windows Scripting Engine Memory Corruption Vulnerability
nvd
CVE-2024-20666MEDIUMCVSS 6.6Exploited≥ 10.0.20348.0, < 10.0.20348.22272024-01-09
CVE-2024-20666 [MEDIUM] CWE-20 BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
cvelistv5
CVE-2026-20812P3MEDIUMCVSS 6.5fixed in 10.0.20348.4648≥ 10.0.20348.0, < 10.0.20348.46482026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2022-26926P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.7072022-05-10
CVE-2022-26926 [HIGH] CWE-284 CVE-2022-26926: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2022-21888P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.4692022-01-11
CVE-2022-21888 [HIGH] CVE-2022-21888: Windows Modern Execution Server Remote Code Execution Vulnerability
Windows Modern Execution Server Remote Code Execution Vulnerability
nvd
CVE-2022-26903P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-26903 [HIGH] CVE-2022-26903: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2021-40462P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.20348.2882021-10-13
CVE-2021-40462 [HIGH] CVE-2021-40462: Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
nvd
CVE-2022-30206P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8252022-07-12
CVE-2022-30206 [HIGH] CVE-2022-30206: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-43234P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.20348.4052021-12-15
CVE-2021-43234 [HIGH] CVE-2021-43234: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-37955P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.10062022-09-13
CVE-2022-37955 [HIGH] CVE-2022-37955: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2021-41340P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.20348.2882021-10-13
CVE-2021-41340 [HIGH] CVE-2021-41340: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-24494P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.6432022-04-15
CVE-2022-24494 [HIGH] CVE-2022-24494: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2022-23284P3HIGHCVSS 7.2≥ 10.0.20348.0, < 10.0.20348.5872022-03-09
CVE-2022-23284 [HIGH] CVE-2022-23284: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-21838P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.4692022-01-11
CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability
Windows Cleanup Manager Elevation of Privilege Vulnerability
nvd
CVE-2024-38064P3HIGHCVSS 7.5fixed in 10.0.20348.2582≥ 10.0.20348.0, < 10.0.20348.25822024-07-09
CVE-2024-38064 [HIGH] CWE-908 CVE-2024-38064: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2024-43625P3HIGHCVSS 8.1fixed in 10.0.20348.2849≥ 10.0.20348.0, < 10.0.20348.28492024-11-12
CVE-2024-43625 [HIGH] CWE-416 CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
nvd
CVE-2022-26913P3HIGHCVSS 7.4≥ 10.0.20348.0, < 10.0.20348.7072022-05-10
CVE-2022-26913 [HIGH] CVE-2022-26913: Windows Authentication Information Disclosure Vulnerability
Windows Authentication Information Disclosure Vulnerability
nvd
CVE-2023-41766P3HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.20312023-10-10
CVE-2023-41766 [HIGH] CWE-426 CVE-2023-41766: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd