VendorsMicrosoftwindows_server_2022_23h2all versions
Vulnerabilities

Microsoft Windows Server 2022

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1687CVEs
CVE-2025-49742
Windows Graphics Component Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.8EPSS 0.003
CVE-2025-49725
Windows Notification Elevation of Privilege Vulnerability
Published 2025-07-08 · Analyzed
7.8EPSS 0.003
CVE-2025-59275
Windows Authentication Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.003
CVE-2025-59278
Windows Authentication Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.003
CVE-2025-58714
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.003
CVE-2025-55328
Windows Hyper-V Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.003
CVE-2026-32089
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.003
CVE-2026-26181
Microsoft Brokering File System Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.003
CVE-2025-64661
Windows Shell Elevation of Privilege Vulnerability
Published 2025-12-09 · Analyzed
7.8EPSS 0.003
CVE-2025-55696
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.002
CVE-2026-35418
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2026-05-12 · Analyzed
7.8EPSS 0.002
CVE-2026-32090
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-27918
Windows Shell Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-34334
Windows TCP/IP Elevation of Privilege Vulnerability
Published 2026-05-12 · Analyzed
7.8EPSS 0.002
CVE-2026-34351
Windows TCP/IP Elevation of Privilege Vulnerability
Published 2026-05-12 · Analyzed
7.8EPSS 0.002
CVE-2026-34337
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2026-05-12 · Analyzed
7.8EPSS 0.002
CVE-2026-27927
Windows Projected File System Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2025-58720
Windows Cryptographic Services Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32165
Windows User Interface Core Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32158
Windows Push Notifications Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-27911
Windows User Interface Core Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32160
Windows Push Notifications Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32159
Windows Push Notifications Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32163
Windows User Interface Core Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-32164
Windows User Interface Core Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-26172
Windows Push Notifications Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-26168
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2026-20930
Windows Management Services Elevation of Privilege Vulnerability
Published 2026-04-14 · Analyzed
7.8EPSS 0.002
CVE-2025-59200
Data Sharing Service Spoofing Vulnerability
Published 2025-10-14 · Analyzed
7.7EPSS 0.008
CVE-2026-20852
Windows Hello Tampering Vulnerability
Published 2026-01-13 · Analyzed
7.7EPSS 0.005
CVE-2026-20804
Windows Hello Tampering Vulnerability
Published 2026-01-13 · Analyzed
7.7EPSS 0.005
CVE-2025-29833
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Published 2025-05-13 · Analyzed
7.7EPSS 0.004
CVE-2026-27913
Windows BitLocker Security Feature Bypass Vulnerability
Published 2026-04-14 · Analyzed
7.7EPSS 0.004
CVE-2024-21351
Windows SmartScreen Security Feature Bypass Vulnerability
Published 2024-02-13 · Analyzed
7.6KEVEPSS 0.278
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
Published 2024-02-14 · Modified
7.5EPSS 1.000
CVE-2024-29059
.NET Framework Information Disclosure Vulnerability
Published 2024-03-22 · Analyzed
7.5KEVEPSS 0.986
CVE-2024-38112
Windows MSHTML Platform Spoofing Vulnerability
Published 2024-07-09 · Analyzed
7.5KEVEPSS 0.842
CVE-2024-49113
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Published 2024-12-10 · Analyzed
7.5EPSS 0.836
CVE-2024-43642
Windows SMB Denial of Service Vulnerability
Published 2024-11-12 · Analyzed
7.5EPSS 0.631
CVE-2024-26212
DHCP Server Service Denial of Service Vulnerability
Published 2024-04-09 · Analyzed
7.5EPSS 0.626
← Prev21 / 43Next →