WS
Product
Windows Server 2022, 23H2 Edition (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
633
CVEs
58
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 475Medium 15Low 0
Watch
Add Windows Server 2022, 23H2 Edition (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59261 | 7.0 | Oct 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59205 | 7.0 | Oct 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59194 | 7.0 | Oct 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59193 | 7.0 | Oct 14 | Windows Management Services Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58738 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58737 | 7.0 | Oct 14 | Remote Desktop Protocol Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58736 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58734 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58733 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58731 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58730 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58727 | 7.0 | Oct 14 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58725 | 7.0 | Oct 14 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55696 | 7.0 | Oct 14 | NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55680 | 7.0 | Oct 14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55678 | 7.0 | Oct 14 | DirectX Graphics Kernel Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55331 | 7.0 | Oct 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55328 | 7.0 | Oct 14 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59282 | 7.0 | Oct 14 | Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59202 | 7.0 | Oct 14 | Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59196 | 7.0 | Oct 14 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59195 | 7.0 | Oct 14 | Windows Graphics Component Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58735 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-58732 | 7.0 | Oct 14 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55689 | 7.0 | Oct 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55687 | 7.0 | Oct 14 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55686 | 7.0 | Oct 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55685 | 7.0 | Oct 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55340 | 7.0 | Oct 14 | Windows Remote Desktop Protocol Security Feature Bypass Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55335 | 7.0 | Oct 14 | Windows NTFS Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-48004 | 7.0 | Oct 14 | Microsoft Brokering File System Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59220 | 7.0 | Sep 18 | Windows Bluetooth Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54115 | 7.0 | Sep 9 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54114 | 7.0 | Sep 9 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54112 | 7.0 | Sep 9 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54105 | 7.0 | Sep 9 | Microsoft Brokering File System Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54093 | 7.0 | Sep 9 | Windows TCP/IP Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-53807 | 7.0 | Sep 9 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-53802 | 7.0 | Sep 9 | Windows Bluetooth Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-55223 | 7.0 | Sep 9 | DirectX Graphics Kernel Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54099 | 7.0 | Sep 9 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-49734 | 7.0 | Sep 9 | PowerShell Direct Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2024-38248 | 7.0 | Sep 10 | Windows Storage Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38246 | 7.0 | Sep 10 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2026-41097 | 6.7 | May 12 | Secure Boot Security Feature Bypass Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-32170 | 6.7 | May 12 | Windows Rich Text Edit Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-21530 | 6.7 | May 12 | Windows Rich Text Edit Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-20876 | 6.7 | Jan 13 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2025-54915 | 6.7 | Sep 9 | Windows Defender Firewall Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54109 | 6.7 | Sep 9 | Windows Defender Firewall Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
The 500 most important CVEs for this product (exploited first, then by severity)