cbcvebase.

Microsoft Windows Server 2022 23H2 vulnerabilities

1,556 known vulnerabilities affecting microsoft/windows_server_2022_23h2.

Total CVEs
1,556
CISA KEV
52
actively exploited
Public exploits
39
Exploited in wild
63
Severity breakdown
CRITICAL25HIGH1099MEDIUM426LOW6

Vulnerabilities

Page 66 of 78
CVE-2026-20839P4MEDIUMCVSS 5.5fixed in 10.0.25398.20922026-01-13
CVE-2026-20839 [MEDIUM] CWE-284 CVE-2026-20839: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker t Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
nvd
CVE-2024-30037P4MEDIUMCVSS 5.5fixed in 10.0.25398.8872024-05-14
CVE-2024-30037 [MEDIUM] CWE-125 CVE-2024-30037: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-40401P4HIGHCVSS 7.1fixed in 10.0.25398.23302026-05-12
CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally. Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
nvd
CVE-2024-49110P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49110 [MEDIUM] CWE-125 CVE-2024-49110: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49073P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49073 [MEDIUM] CWE-20 CVE-2024-49073: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49077P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49077 [MEDIUM] CWE-125 CVE-2024-49077: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49078P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49078 [MEDIUM] CWE-125 CVE-2024-49078: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49083P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49083 [MEDIUM] CWE-125 CVE-2024-49083: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49092P4MEDIUMCVSS 6.8fixed in 10.0.25398.13082024-12-12
CVE-2024-49092 [MEDIUM] CWE-125 CVE-2024-49092: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43634P4MEDIUMCVSS 6.8fixed in 10.0.25398.12512024-11-12
CVE-2024-43634 [MEDIUM] CWE-125 CVE-2024-43634: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43449P4MEDIUMCVSS 6.8fixed in 10.0.25398.12512024-11-12
CVE-2024-43449 [MEDIUM] CWE-125 CVE-2024-43449: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43637P4MEDIUMCVSS 6.8fixed in 10.0.25398.12512024-11-12
CVE-2024-43637 [MEDIUM] CWE-125 CVE-2024-43637: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43638P4MEDIUMCVSS 6.8fixed in 10.0.25398.12512024-11-12
CVE-2024-43638 [MEDIUM] CWE-125 CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43643P4MEDIUMCVSS 6.8fixed in 10.0.25398.12512024-11-12
CVE-2024-43643 [MEDIUM] CWE-125 CVE-2024-43643: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38223P4MEDIUMCVSS 6.8fixed in 10.0.25398.10852024-08-13
CVE-2024-38223 [MEDIUM] CWE-284 CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability Windows Initial Machine Configuration Elevation of Privilege Vulnerability
nvd
CVE-2025-24987P4MEDIUMCVSS 6.8fixed in 10.0.25398.14862025-03-11
CVE-2025-24987 [MEDIUM] CWE-125 CVE-2025-24987: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-24988P4MEDIUMCVSS 6.8fixed in 10.0.25398.14862025-03-11
CVE-2025-24988 [MEDIUM] CWE-125 CVE-2025-24988: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-49751P4MEDIUMCVSS 6.8fixed in 10.0.25398.17912025-08-12
CVE-2025-49751 [MEDIUM] CWE-820 CVE-2025-49751: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-47999P4MEDIUMCVSS 6.8fixed in 10.0.25398.17322025-07-08
CVE-2025-47999 [MEDIUM] CWE-820 CVE-2025-47999: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-21242P4MEDIUMCVSS 5.9fixed in 10.0.25398.13692025-01-14
CVE-2025-21242 [MEDIUM] CWE-200 CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability Windows Kerberos Information Disclosure Vulnerability
nvd