WS
Product
Windows Server 2022, 23H2 Edition (Server Core installation)
by Microsoft · last CVE May 12, 2026
On CISA KEVExploited in the wildRansomware-linked
266
CVEs
58
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 216Medium 43Low 0
Watch

Add Windows Server 2022, 23H2 Edition (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33824
In wildKEV
9.8
77%
Apr 14
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.2274
CVE-2025-59287
In wildKEV
9.8
100%
Oct 14
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.1916
CVE-2026-41096
9.8
3%
May 12
Windows DNS Client Remote Code Execution Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.2330
CVE-2026-41089
9.8
80%
May 12
Windows Netlogon Remote Code Execution Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.2330
CVE-2024-43455
9.8
2%
Sep 10
Windows Remote Desktop Licensing Service Spoofing Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.1128
CVE-2024-21416
9.8
1%
Sep 10
Windows TCP/IP Remote Code Execution Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.1128
CVE-2024-38240
9.8
1%
Sep 10
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Affected: 10.0.25398.0 before 10.0.25398.1128
Showing 7