Microsoft Windows Server 2022 23H2 vulnerabilities
1,556 known vulnerabilities affecting microsoft/windows_server_2022_23h2.
Total CVEs
1,556
CISA KEV
53
actively exploited
Public exploits
40
Exploited in wild
64
Severity breakdown
CRITICAL25HIGH1099MEDIUM426LOW6
Vulnerabilities
Page 13 of 78
CVE-2025-21291P3HIGHCVSS 8.8fixed in 10.0.25398.13692025-01-14
CVE-2025-21291 [HIGH] CWE-415 CVE-2025-21291: Windows Direct Show Remote Code Execution Vulnerability
Windows Direct Show Remote Code Execution Vulnerability
nvd
CVE-2024-43607P3HIGHCVSS 8.8fixed in 10.0.25398.11892024-10-08
CVE-2024-43607 [HIGH] CWE-122 CVE-2024-43607: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43608P3HIGHCVSS 8.8fixed in 10.0.25398.11892024-10-08
CVE-2024-43608 [HIGH] CWE-122 CVE-2024-43608: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43549P3HIGHCVSS 8.8fixed in 10.0.25398.11892024-10-08
CVE-2024-43549 [HIGH] CWE-121 CVE-2024-43549: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43564P3HIGHCVSS 8.8fixed in 10.0.25398.11892024-10-08
CVE-2024-43564 [HIGH] CWE-122 CVE-2024-43564: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-43582P3HIGHCVSS 8.1fixed in 10.0.25398.11892024-10-08
CVE-2024-43582 [HIGH] CWE-416 CVE-2024-43582: Remote Desktop Protocol Server Remote Code Execution Vulnerability
Remote Desktop Protocol Server Remote Code Execution Vulnerability
nvd
CVE-2025-27481P3HIGHCVSS 8.8fixed in 10.0.25398.15512025-04-08
CVE-2025-27481 [HIGH] CWE-121 CVE-2025-27481: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29840P3HIGHCVSS 8.8fixed in 10.0.25398.16112025-05-13
CVE-2025-29840 [HIGH] CWE-121 CVE-2025-29840: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a
Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21294P3HIGHCVSS 8.1fixed in 10.0.25398.13692025-01-14
CVE-2025-21294 [HIGH] CWE-591 CVE-2025-21294: Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft Digest Authentication Remote Code Execution Vulnerability
nvd
CVE-2026-40415P3HIGHCVSS 8.1fixed in 10.0.25398.23302026-05-12
CVE-2026-40415 [HIGH] CWE-416 CVE-2026-40415: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21311P3CRITICALCVSS 9.8fixed in 10.0.25398.13692025-01-14
CVE-2025-21311 [CRITICAL] CWE-303 CVE-2025-21311: Windows NTLM V1 Elevation of Privilege Vulnerability
Windows NTLM V1 Elevation of Privilege Vulnerability
nvd
CVE-2024-43455P3CRITICALCVSS 9.8fixed in 10.0.25398.11282024-09-10
CVE-2024-43455 [CRITICAL] CWE-20 CVE-2024-43455: Windows Remote Desktop Licensing Service Spoofing Vulnerability
Windows Remote Desktop Licensing Service Spoofing Vulnerability
nvd
CVE-2026-24289P3HIGHCVSS 7.8fixed in 10.0.25398.22072026-03-10
CVE-2026-24289 [HIGH] CWE-416 CVE-2026-24289: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-21440P3HIGHCVSS 8.8fixed in 10.0.25398.8302024-03-12
CVE-2024-21440 [HIGH] CWE-197 CVE-2024-21440: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26162P3HIGHCVSS 8.8fixed in 10.0.25398.7632024-03-12
CVE-2024-26162 [HIGH] CWE-681 CVE-2024-26162: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-30097P3HIGHCVSS 8.8fixed in 10.0.25398.9502024-06-11
CVE-2024-30097 [HIGH] CWE-415 CVE-2024-30097: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
nvd
CVE-2024-30006P3HIGHCVSS 8.8fixed in 10.0.25398.8872024-05-14
CVE-2024-30006 [HIGH] CWE-416 CVE-2024-30006: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21349P3HIGHCVSS 8.8fixed in 10.0.25398.7092024-02-13
CVE-2024-21349 [HIGH] CWE-122 CVE-2024-21349: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
nvd
CVE-2026-20871P3HIGHCVSS 7.8fixed in 10.0.25398.20922026-01-13
CVE-2026-20871 [HIGH] CWE-416 CVE-2026-20871: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-24056P3HIGHCVSS 8.8fixed in 10.0.25398.14862025-03-11
CVE-2025-24056 [HIGH] CWE-122 CVE-2025-24056: Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute co
Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
nvd