Microsoft Windows Server 2022 23H2 vulnerabilities

1,380 known vulnerabilities affecting microsoft/windows_server_2022_23h2.

Total CVEs
1,380
CISA KEV
51
actively exploited
Public exploits
23
Exploited in wild
19
Severity breakdown
CRITICAL22HIGH958MEDIUM394LOW6

Vulnerabilities

Page 57 of 69
CVE-2024-38019HIGHCVSS 7.2fixed in 10.0.25398.10092024-07-09
CVE-2024-38019 [HIGH] CWE-190 CVE-2024-38019: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2024-38034HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38034 [HIGH] CWE-190 CVE-2024-38034: Windows Filtering Platform Elevation of Privilege Vulnerability Windows Filtering Platform Elevation of Privilege Vulnerability
nvd
CVE-2024-38057HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38057 [HIGH] CWE-125 CVE-2024-38057: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38028HIGHCVSS 7.2fixed in 10.0.25398.10092024-07-09
CVE-2024-38028 [HIGH] CWE-125 CVE-2024-38028: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd
CVE-2024-38091HIGHCVSS 7.5fixed in 10.0.25398.10092024-07-09
CVE-2024-38091 [HIGH] CWE-166 CVE-2024-38091: Microsoft WS-Discovery Denial of Service Vulnerability Microsoft WS-Discovery Denial of Service Vulnerability
nvd
CVE-2024-38031HIGHCVSS 7.5fixed in 10.0.25398.10092024-07-09
CVE-2024-38031 [HIGH] CWE-400 CVE-2024-38031: Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
nvd
CVE-2024-38060HIGHCVSS 8.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38060 [HIGH] CWE-122 CVE-2024-38060: Windows Imaging Component Remote Code Execution Vulnerability Windows Imaging Component Remote Code Execution Vulnerability
nvd
CVE-2024-38061HIGHCVSS 7.5fixed in 10.0.25398.10092024-07-09
CVE-2024-38061 [HIGH] CWE-284 CVE-2024-38061: DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
nvd
CVE-2024-38071HIGHCVSS 7.5fixed in 10.0.25398.10092024-07-09
CVE-2024-38071 [HIGH] CWE-126 CVE-2024-38071: Windows Remote Desktop Licensing Service Denial of Service Vulnerability Windows Remote Desktop Licensing Service Denial of Service Vulnerability
nvd
CVE-2024-30098HIGHCVSS 7.5fixed in 10.0.25398.10092024-07-09
CVE-2024-30098 [HIGH] CWE-327 CVE-2024-30098: Windows Cryptographic Services Security Feature Bypass Vulnerability Windows Cryptographic Services Security Feature Bypass Vulnerability
nvd
CVE-2024-38100HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38100 [HIGH] CWE-284 CVE-2024-38100: Windows File Explorer Elevation of Privilege Vulnerability Windows File Explorer Elevation of Privilege Vulnerability
nvd
CVE-2024-38080HIGHCVSS 7.8KEVfixed in 10.0.25398.10092024-07-09
CVE-2024-38080 [HIGH] CWE-190 CVE-2024-38080: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2024-38062HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38062 [HIGH] CWE-125 CVE-2024-38062: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38104HIGHCVSS 8.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38104 [HIGH] CWE-822 CVE-2024-38104: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2024-30013HIGHCVSS 8.8fixed in 10.0.25398.10092024-07-09
CVE-2024-30013 [HIGH] CWE-415 CVE-2024-30013: Windows MultiPoint Services Remote Code Execution Vulnerability Windows MultiPoint Services Remote Code Execution Vulnerability
nvd
CVE-2024-38044HIGHCVSS 7.2fixed in 10.0.25398.10092024-07-09
CVE-2024-38044 [HIGH] CWE-197 CVE-2024-38044: DHCP Server Service Remote Code Execution Vulnerability DHCP Server Service Remote Code Execution Vulnerability
nvd
CVE-2024-38053HIGHCVSS 8.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38053 [HIGH] CWE-416 CVE-2024-38053: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
nvd
CVE-2024-38049HIGHCVSS 8.1fixed in 10.0.25398.10092024-07-09
CVE-2024-38049 [HIGH] CWE-73 CVE-2024-38049: Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
nvd
CVE-2024-38051HIGHCVSS 7.8fixed in 10.0.25398.10092024-07-09
CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2024-38025HIGHCVSS 7.2fixed in 10.0.25398.10092024-07-09
CVE-2024-38025 [HIGH] CWE-122 CVE-2024-38025: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
nvd