Microsoft Windows Server 2022 vulnerabilities

2,817 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
2,817
CISA KEV
102
actively exploited
Public exploits
38
Exploited in wild
85
Severity breakdown
CRITICAL74HIGH2015MEDIUM717LOW11

Vulnerabilities

Page 93 of 141
CVE-2023-32011HIGHCVSS 7.5fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32011 [HIGH] CWE-125 CVE-2023-32011: Windows iSCSI Discovery Service Denial of Service Vulnerability Windows iSCSI Discovery Service Denial of Service Vulnerability
nvd
CVE-2023-29366HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29366 [HIGH] CWE-415 CVE-2023-29366: Windows Geolocation Service Remote Code Execution Vulnerability Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2023-29372HIGHCVSS 8.8fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29372 [HIGH] CWE-122 CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32008HIGHCVSS 7.8fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32008 [HIGH] CWE-476 CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
nvd
CVE-2023-29361HIGHCVSS 7.0fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29361 [HIGH] CWE-416 CVE-2023-29361: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-32021HIGHCVSS 7.1≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32021 [HIGH] CVE-2023-32021: Windows SMB Witness Service Security Feature Bypass Vulnerability Windows SMB Witness Service Security Feature Bypass Vulnerability
nvd
CVE-2023-32009HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32009 [HIGH] CWE-284 CVE-2023-32009: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
nvd
CVE-2023-29351HIGHCVSS 8.1fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29351 [HIGH] CWE-59 CVE-2023-29351: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2023-29367HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29367 [HIGH] CWE-908 CVE-2023-29367: iSCSI Target WMI Provider Remote Code Execution Vulnerability iSCSI Target WMI Provider Remote Code Execution Vulnerability
nvd
CVE-2023-29368HIGHCVSS 7.0fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29368 [HIGH] CWE-415 CVE-2023-29368: Windows Filtering Platform Elevation of Privilege Vulnerability Windows Filtering Platform Elevation of Privilege Vulnerability
nvd
CVE-2023-29364HIGHCVSS 7.0fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29364 [HIGH] CWE-190 CVE-2023-29364: Windows Authentication Elevation of Privilege Vulnerability Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2023-29352MEDIUMCVSS 6.5fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29352 [MEDIUM] CVE-2023-29352: Windows Remote Desktop Security Feature Bypass Vulnerability Windows Remote Desktop Security Feature Bypass Vulnerability
nvd
CVE-2023-24937MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-24937 [MEDIUM] CWE-20 Windows CryptoAPI Denial of Service Vulnerability Windows CryptoAPI Denial of Service Vulnerability Windows CryptoAPI Denial of Service Vulnerability
cvelistv5
CVE-2023-32019MEDIUMCVSS 4.7fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32019 [MEDIUM] CWE-668 CVE-2023-32019: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-32016MEDIUMCVSS 5.5fixed in 10.0.20348.1787≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-32016 [MEDIUM] CWE-908 CVE-2023-32016: Windows Installer Information Disclosure Vulnerability Windows Installer Information Disclosure Vulnerability
nvd
CVE-2023-29369MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29369 [MEDIUM] CWE-190 CVE-2023-29369: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-29355MEDIUMCVSS 5.3≥ 10.0.20348.0, < 10.0.20348.17872023-06-14
CVE-2023-29355 [MEDIUM] CWE-668 CVE-2023-29355: DHCP Server Service Information Disclosure Vulnerability DHCP Server Service Information Disclosure Vulnerability
nvd
CVE-2023-29365HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29365 [HIGH] CWE-416 Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability
cvelistv5
CVE-2023-29359HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29359 [HIGH] CWE-20 GDI Elevation of Privilege Vulnerability GDI Elevation of Privilege Vulnerability GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-29371HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29371 [HIGH] CWE-20 Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5