Microsoft Windows Server 2022 vulnerabilities

2,817 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
2,817
CISA KEV
103
actively exploited
Public exploits
38
Exploited in wild
85
Severity breakdown
CRITICAL74HIGH2015MEDIUM717LOW11

Vulnerabilities

Page 94 of 141
CVE-2023-29358HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29358 [HIGH] CWE-416 Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-29370HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29370 [HIGH] CWE-122 Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability
cvelistv5
CVE-2023-29346HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-29346 [HIGH] CWE-681 NTFS Elevation of Privilege Vulnerability NTFS Elevation of Privilege Vulnerability NTFS Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-24938MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-24938 [MEDIUM] CWE-476 Windows CryptoAPI Denial of Service Vulnerability Windows CryptoAPI Denial of Service Vulnerability Windows CryptoAPI Denial of Service Vulnerability
cvelistv5
CVE-2023-32013MEDIUMCVSS 5.3≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-32013 [MEDIUM] CWE-400 Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability
cvelistv5
CVE-2023-32020MEDIUMCVSS 5.6≥ 10.0.20348.0, < 10.0.20348.17872023-06-13
CVE-2023-32020 [MEDIUM] Windows DNS Spoofing Vulnerability Windows DNS Spoofing Vulnerability Windows DNS Spoofing Vulnerability
cvelistv5
CVE-2022-35744CRITICALCVSS 9.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35744 [CRITICAL] CVE-2022-35744: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
nvd
CVE-2022-35746HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35746 [HIGH] CVE-2022-35746: Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2022-35748HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35748 [HIGH] HTTP.sys Denial of Service Vulnerability HTTP.sys Denial of Service Vulnerability HTTP.sys Denial of Service Vulnerability
cvelistv5
CVE-2022-35751HIGHCVSS 7.8fixed in 10.0.20348.887≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35751 [HIGH] CVE-2022-35751: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2022-35755HIGHCVSS 7.3≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35755 [HIGH] CVE-2022-35755: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-35745HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35745 [HIGH] CVE-2022-35745: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35757HIGHCVSS 7.3≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35757 [HIGH] CVE-2022-35757: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-35752HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35752 [HIGH] CVE-2022-35752: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35749HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35749 [HIGH] CVE-2022-35749: Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2022-35753HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35753 [HIGH] CVE-2022-35753: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35756HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-35743HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35743 [HIGH] CWE-94 CVE-2022-35743: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
nvd
CVE-2022-35750HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35750 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-35747MEDIUMCVSS 5.9≥ 10.0.20348.0, < 10.0.20348.8872023-05-31
CVE-2022-35747 [MEDIUM] CVE-2022-35747: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
nvd