WS
Product
Windows Server 2022, 23H2 Edition (Server Core installation)
On CISA KEVExploited in the wildRansomware-linked
826
CVEs
58
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 13High 478Medium 9Low 0
Watch
Add Windows Server 2022, 23H2 Edition (Server Core installation) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32713 | 7.8 | Jun 10 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1665 |
| CVE-2025-32712 | 7.8 | Jun 10 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1665 |
| CVE-2024-30073 | 7.8 | Sep 10 | Windows Security Zone Mapping Security Feature Bypass Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38247 | 7.8 | Sep 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38245 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38244 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38243 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38238 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38237 | 7.8 | Sep 10 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38046 | 7.8 | Sep 10 | PowerShell Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38253 | 7.8 | Sep 10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38252 | 7.8 | Sep 10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38250 | 7.8 | Sep 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38249 | 7.8 | Sep 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38242 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2024-38241 | 7.8 | Sep 10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1128 |
| CVE-2026-27913 | 7.7 | Apr 14 | Windows BitLocker Security Feature Bypass Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-20852 | 7.7 | Jan 13 | Windows Hello Tampering Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20804 | 7.7 | Jan 13 | Windows Hello Tampering Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2025-59200 | 7.7 | Oct 14 | Data Sharing Service Spoofing Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2026-32161 | 7.5 | May 12 | Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-40406 | 7.5 | May 12 | Windows TCP/IP Information Disclosure Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-35424 | 7.5 | May 12 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2330 |
| CVE-2026-33096 | 7.5 | Apr 14 | HTTP.sys Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-32071 | 7.5 | Apr 14 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-26154 | 7.5 | Apr 14 | Windows Server Update Service (WSUS) Tampering Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2274 |
| CVE-2026-23674 | 7.5 | Mar 10 | MapUrlToZone Security Feature Bypass Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2207 |
| CVE-2026-25181 | 7.5 | Mar 10 | GDI+ Information Disclosure Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2207 |
| CVE-2026-20846 | 7.5 | Feb 10 | GDI+ Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2149 |
| CVE-2026-21243 | 7.5 | Feb 10 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2149 |
| CVE-2026-20929 | 7.5 | Jan 13 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20849 | 7.5 | Jan 13 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20848 | 7.5 | Jan 13 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20934 | 7.5 | Jan 13 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20926 | 7.5 | Jan 13 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20921 | 7.5 | Jan 13 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20919 | 7.5 | Jan 13 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-20875 | 7.5 | Jan 13 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2026-0386 | 7.5 | Jan 13 | Windows Deployment Services Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2092 |
| CVE-2025-64658 | 7.5 | Dec 9 | Windows File Explorer Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.2025 |
| CVE-2025-60704 | 7.5 | Nov 11 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1965 |
| CVE-2025-58726 | 7.5 | Oct 14 | Windows SMB Server Elevation of Privilege Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-55326 | 7.5 | Oct 14 | Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1913 |
| CVE-2025-59502 | 7.5 | Oct 14 | Remote Procedure Call Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-53805 | 7.5 | Sep 9 | HTTP.sys Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-54919 | 7.5 | Sep 9 | Windows Graphics Component Remote Code Execution Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1849 |
| CVE-2025-53722 | 7.5 | Aug 12 | Windows Remote Desktop Services Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1791 |
| CVE-2025-48814 | 7.5 | Jul 8 | Remote Desktop Licensing Service Security Feature Bypass Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1732 |
| CVE-2025-49716 | 7.5 | Jul 8 | Windows Netlogon Denial of Service Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1732 |
| CVE-2025-47984 | 7.5 | Jul 8 | Windows GDI Information Disclosure Vulnerability Affected: 10.0.25398.0 before 10.0.25398.1732 |
The 500 most important CVEs for this product (exploited first, then by severity)