Microsoft Windows Server 2022 vulnerabilities

2,817 known vulnerabilities affecting microsoft/windows_server_2022.

Total CVEs
2,817
CISA KEV
103
actively exploited
Public exploits
38
Exploited in wild
85
Severity breakdown
CRITICAL74HIGH2015MEDIUM717LOW11

Vulnerabilities

Page 99 of 141
CVE-2023-28266MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2023-28255MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28255 [MEDIUM] CWE-591 CVE-2023-28255: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28305MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28305 [MEDIUM] CWE-416 CVE-2023-28305: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28253MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28253 [MEDIUM] CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-28223MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28223 [MEDIUM] CWE-416 CVE-2023-28223: Windows Domain Name Service Remote Code Execution Vulnerability Windows Domain Name Service Remote Code Execution Vulnerability
nvd
CVE-2023-28298MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28298 [MEDIUM] Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability
cvelistv5
CVE-2023-28249MEDIUMCVSS 6.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28249 [MEDIUM] CWE-863 CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28306MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28306 [MEDIUM] CWE-416 CVE-2023-28306: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28270MEDIUMCVSS 6.8≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28270 [MEDIUM] CWE-863 CVE-2023-28270: Windows Lock Screen Security Feature Bypass Vulnerability Windows Lock Screen Security Feature Bypass Vulnerability
nvd
CVE-2023-28307MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28307 [MEDIUM] CWE-416 CVE-2023-28307: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28267MEDIUMCVSS 6.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28267 [MEDIUM] CWE-126 CVE-2023-28267: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2023-28256MEDIUMCVSS 6.6≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28256 [MEDIUM] CWE-591 CVE-2023-28256: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2023-28228MEDIUMCVSS 5.5≥ 10.0.20348.0, < 10.0.20348.16682023-04-11
CVE-2023-28228 [MEDIUM] CWE-347 Windows Spoofing Vulnerability Windows Spoofing Vulnerability Windows Spoofing Vulnerability
cvelistv5
CVE-2023-23392CRITICALCVSS 9.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-23392 [CRITICAL] CWE-416 CVE-2023-23392: HTTP Protocol Stack Remote Code Execution Vulnerability HTTP Protocol Stack Remote Code Execution Vulnerability
nvd
CVE-2023-23415CRITICALCVSS 9.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-23415 [CRITICAL] CWE-122 CVE-2023-23415: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
nvd
CVE-2023-21708CRITICALCVSS 9.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-21708 [CRITICAL] CWE-191 CVE-2023-21708: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-23402HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-23402 [HIGH] CWE-415 Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability
cvelistv5
CVE-2023-23422HIGHCVSS 7.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-23422 [HIGH] CVE-2023-23422: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-23388HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-23388 [HIGH] CWE-681 CVE-2023-23388: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-24909HIGHCVSS 8.8≥ 10.0.20348.0, < 10.0.20348.16072023-03-14
CVE-2023-24909 [HIGH] CWE-190 CVE-2023-24909: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd