WS
Product
Windows Server 2022 23h2
On CISA KEVExploited in the wildRansomware-linked
1,676
CVEs
59
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 463Medium 11Low 0
Watch
Add Windows Server 2022 23h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25190 | 7.8 | Mar 10 | Windows GDI Remote Code Execution Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25187 | 7.8 | Mar 10 | Winlogon Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25176 | 7.8 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25175 | 7.8 | Mar 10 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25174 | 7.8 | Mar 10 | Windows Extensible File Allocation Table Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25166 | 7.8 | Mar 10 | Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25165 | 7.8 | Mar 10 | Performance Counters for Windows Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24294 | 7.8 | Mar 10 | Windows SMB Server Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24293 | 7.8 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24292 | 7.8 | Mar 10 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24291 | 7.8 | Mar 10 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24290 | 7.8 | Mar 10 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24289 | 7.8 | Mar 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24287 | 7.8 | Mar 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-23673 | 7.8 | Mar 10 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-23672 | 7.8 | Mar 10 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-21231 | 7.8 | Feb 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21232 | 7.8 | Feb 10 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21238 | 7.8 | Feb 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21239 | 7.8 | Feb 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21250 | 7.8 | Feb 10 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21251 | 7.8 | Feb 10 | Cluster Client Failover (CCF) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21236 | 7.8 | Feb 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21246 | 7.8 | Feb 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-20874 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20873 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20871 | 7.8 | Jan 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20867 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20866 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20861 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20843 | 7.8 | Jan 13 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20924 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20923 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20922 | 7.8 | Jan 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20920 | 7.8 | Jan 13 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20918 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20877 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20865 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20864 | 7.8 | Jan 13 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20860 | 7.8 | Jan 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20858 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20857 | 7.8 | Jan 13 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20840 | 7.8 | Jan 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20837 | 7.8 | Jan 13 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20832 | 7.8 | Jan 13 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20822 | 7.8 | Jan 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20820 | 7.8 | Jan 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20817 | 7.8 | Jan 13 | Windows Error Reporting Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20811 | 7.8 | Jan 13 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20809 | 7.8 | Jan 13 | Windows Kernel Memory Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
The 500 most important CVEs for this product (exploited first, then by severity)