Microsoft Windows Server 2022 23H2 vulnerabilities
1,556 known vulnerabilities affecting microsoft/windows_server_2022_23h2.
Total CVEs
1,556
CISA KEV
53
actively exploited
Public exploits
40
Exploited in wild
64
Severity breakdown
CRITICAL25HIGH1099MEDIUM426LOW6
Vulnerabilities
Page 41 of 78
CVE-2024-30086P3HIGHCVSS 7.8fixed in 10.0.25398.9502024-06-11
CVE-2024-30086 [HIGH] CWE-416 CVE-2024-30086: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2024-38051P3HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2024-38185P3HIGHCVSS 7.8fixed in 10.0.25398.10092024-08-13
CVE-2024-38185 [HIGH] CWE-822 CVE-2024-38185: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38187P3HIGHCVSS 7.8fixed in 10.0.25398.10092024-08-13
CVE-2024-38187 [HIGH] CWE-822 CVE-2024-38187: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-30095P3HIGHCVSS 7.8fixed in 10.0.25398.9502024-06-11
CVE-2024-30095 [HIGH] CWE-122 CVE-2024-30095: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49079P3HIGHCVSS 7.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49079 [HIGH] CWE-416 CVE-2024-49079: Input Method Editor (IME) Remote Code Execution Vulnerability
Input Method Editor (IME) Remote Code Execution Vulnerability
nvd
CVE-2024-38249P3HIGHCVSS 7.8fixed in 10.0.25398.11282024-09-10
CVE-2024-38249 [HIGH] CWE-416 CVE-2024-38249: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-30094P3HIGHCVSS 7.8fixed in 10.0.25398.9502024-06-11
CVE-2024-30094 [HIGH] CWE-122 CVE-2024-30094: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26173P3HIGHCVSS 7.8fixed in 10.0.25398.7632024-03-12
CVE-2024-26173 [HIGH] CWE-20 CVE-2024-26173: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-26178P3HIGHCVSS 7.8fixed in 10.0.25398.7632024-03-12
CVE-2024-26178 [HIGH] CWE-122 CVE-2024-26178: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30018P3HIGHCVSS 7.8fixed in 10.0.25398.8872024-05-14
CVE-2024-30018 [HIGH] CWE-59 CVE-2024-30018: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-36696P3HIGHCVSS 7.8fixed in 10.0.25398.5842023-12-12
CVE-2023-36696 [HIGH] CWE-125 CVE-2023-36696: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38261P3HIGHCVSS 7.8fixed in 10.0.25398.11892024-10-08
CVE-2024-38261 [HIGH] CWE-20 CVE-2024-38261: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-20693P3HIGHCVSS 7.8fixed in 10.0.25398.8302024-04-09
CVE-2024-20693 [HIGH] CWE-426 CVE-2024-20693: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38186P3HIGHCVSS 7.8fixed in 10.0.25398.10092024-08-13
CVE-2024-38186 [HIGH] CWE-367 CVE-2024-38186: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-26176P3HIGHCVSS 7.8fixed in 10.0.25398.7632024-03-12
CVE-2024-26176 [HIGH] CWE-126 CVE-2024-26176: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-21434P3HIGHCVSS 7.8fixed in 10.0.25398.7632024-03-12
CVE-2024-21434 [HIGH] CWE-197 CVE-2024-21434: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
nvd
CVE-2025-21373P3HIGHCVSS 7.8fixed in 10.0.25398.14252025-02-11
CVE-2025-21373 [HIGH] CWE-59 CVE-2025-21373: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-53805P3HIGHCVSS 7.5fixed in 10.0.25398.18492025-09-09
CVE-2025-53805 [HIGH] CWE-125 CVE-2025-53805: Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-21358P3HIGHCVSS 7.8fixed in 10.0.25398.14252025-02-11
CVE-2025-21358 [HIGH] CWE-822 CVE-2025-21358: Windows Core Messaging Elevation of Privileges Vulnerability
Windows Core Messaging Elevation of Privileges Vulnerability
nvd