Microsoft Windows Server 2022 vulnerabilities

2,817 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
2,817
CISA KEV
103
actively exploited
Public exploits
38
Exploited in wild
85
Severity breakdown
CRITICAL74HIGH2015MEDIUM717LOW11

Vulnerabilities

Page 97 of 141
CVE-2023-28236HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28236 [HIGH] CWE-591 CVE-2023-28236: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28247HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28247 [HIGH] CWE-191 CVE-2023-28247: Windows Network File System Information Disclosure Vulnerability Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2023-28231HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28231 [HIGH] CWE-122 CVE-2023-28231: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2023-28246HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28246 [HIGH] CWE-284 CVE-2023-28246: Windows Registry Elevation of Privilege Vulnerability Windows Registry Elevation of Privilege Vulnerability
nvd
CVE-2023-24929HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24929 [HIGH] CWE-843 CVE-2023-24929: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-28244HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28244 [HIGH] CWE-327 CVE-2023-28244: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2023-24912HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24912 [HIGH] CWE-122 CVE-2023-24912: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-24927HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24927 [HIGH] CWE-843 CVE-2023-24927: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-28225HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28225 [HIGH] CWE-122 Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability Windows NTLM Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-28229HIGHCVSS 7.0KEV≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28229 [HIGH] CWE-591 CVE-2023-28229: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
nvd
CVE-2023-28218HIGHCVSS 7.0≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2023-24931HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24931 [HIGH] CWE-125 CVE-2023-24931: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2023-28222HIGHCVSS 7.1≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28222 [HIGH] CWE-59 CVE-2023-28222: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-24924HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24924 [HIGH] CWE-125 CVE-2023-24924: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24885HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-24885 [HIGH] CWE-843 CVE-2023-24885: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-28275HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28275 [HIGH] CWE-122 CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-28234HIGHCVSS 7.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28234 [HIGH] CVE-2023-28234: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2023-28216HIGHCVSS 7.0≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28216 [HIGH] CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2023-28219HIGHCVSS 8.1≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28219 [HIGH] CWE-591 CVE-2023-28219: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-28224HIGHCVSS 7.1≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28224 [HIGH] CWE-591 CVE-2023-28224: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
nvd