WS
Product
Windows Server 2022, 23H2 Edition (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
306
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 251Medium 48Low 0
Watch
Add Windows Server 2022, 23H2 Edition (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38236 | 7.5 | Sep 10 | DHCP Server Service Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2026-40413 | 7.4 | May 12 | Windows TCP/IP Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-40414 | 7.4 | May 12 | Windows TCP/IP Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-32156 | 7.4 | Apr 14 | Windows UPnP Device Host Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32149 | 7.3 | Apr 14 | Windows Hyper-V Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2024-43495 | 7.3 | Sep 10 | Windows libarchive Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1009 |
| CVE-2024-38239 | 7.2 | Sep 10 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2026-40401 | 7.1 | May 12 | Windows TCP/IP Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-26151 | 7.1 | Apr 14 | Remote Desktop Spoofing Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2024-43454 | 7.1 | Sep 10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2026-34341 | 7.0 | May 12 | Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34340 | 7.0 | May 12 | Windows Projected File System Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34337 | 7.0 | May 12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34334 | 7.0 | May 12 | Windows TCP/IP Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-42825 | 7.0 | May 12 | Windows Telephony Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-40410 | 7.0 | May 12 | Windows SMB Client Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-35418 | 7.0 | May 12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-35416 | 7.0 | May 12 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34351 | 7.0 | May 12 | Windows TCP/IP Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34347 | 7.0 | May 12 | Windows Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34345 | 7.0 | May 12 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34342 | 7.0 | May 12 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-34331 | 7.0 | May 12 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-33839 | 7.0 | May 12 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-33104 | 7.0 | Apr 14 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-33100 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-33099 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32150 | 7.0 | Apr 14 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32091 | 7.0 | Apr 14 | Microsoft Brokering File System Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32086 | 7.0 | Apr 14 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32080 | 7.0 | Apr 14 | Windows WalletService Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32070 | 7.0 | Apr 14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32068 | 7.0 | Apr 14 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27922 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-26182 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-26177 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-26173 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-26152 | 7.0 | Apr 14 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32093 | 7.0 | Apr 14 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32090 | 7.0 | Apr 14 | Windows Speech Brokered Api Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32087 | 7.0 | Apr 14 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32083 | 7.0 | Apr 14 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32082 | 7.0 | Apr 14 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32075 | 7.0 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32073 | 7.0 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27929 | 7.0 | Apr 14 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27927 | 7.0 | Apr 14 | Windows Projected File System Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27926 | 7.0 | Apr 14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27921 | 7.0 | Apr 14 | Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-27918 | 7.0 | Apr 14 | Windows Shell Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |