Login Request a demo
WS
Product
Windows Server 2022 23h2
by Microsoft · last CVE May 12, 2026
On CISA KEVExploited in the wildRansomware-linked
1,676
CVEs
59
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities1,676In the news12Timeline
Severity mix
Critical 26High 463Medium 11Low 0
Severity
All severities500Critical26High463Medium11Low0
Exploitation
On CISA KEV59Exploited in the wild59
Watch

Add Windows Server 2022 23h2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-35630
8.8
6%
Dec 12
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.584
CVE-2026-27928
8.7
0%
Apr 14
Windows Hello Security Feature Bypass Vulnerability
Affected: before 10.0.25398.2274
CVE-2025-48822
8.6
1%
Jul 8
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1732
CVE-2025-27737
8.6
1%
Apr 8
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Affected: before 10.0.25398.1551
CVE-2026-32162
8.4
2%
Apr 14
Windows COM Elevation of Privilege Vulnerability
Affected: before 10.0.25398.2274
CVE-2025-33067
8.4
0%
Jun 10
Windows Task Scheduler Elevation of Privilege Vulnerability
Affected: before 10.0.25398.1665
CVE-2025-26678
8.4
1%
Apr 8
Windows Defender Application Control Security Feature Bypass Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-24084
8.4
1%
Mar 11
Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
Affected: before 10.0.25398.1486
CVE-2024-49105
8.4
2%
Dec 10
Remote Desktop Client Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-43584
8.4
1%
Oct 8
Windows Scripting Engine Security Feature Bypass Vulnerability
Affected: before 10.0.25398.1189
CVE-2024-37984
8.4
1%
Jul 9
Secure Boot Security Feature Bypass Vulnerability
Affected: before 10.0.25398.1009
CVE-2024-43574
8.3
1%
Oct 8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1189
CVE-2026-40415
8.1
1%
May 12
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.25398.2330
CVE-2026-33827
8.1
1%
Apr 14
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.25398.2274
CVE-2026-20856
8.1
1%
Jan 13
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.2092
CVE-2025-50177
8.1
4%
Aug 12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1791
CVE-2025-49735
8.1
1%
Jul 8
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1665
CVE-2025-33070
8.1
10%
Jun 10
Windows Netlogon Elevation of Privilege Vulnerability
Affected: before 10.0.25398.1665
CVE-2025-33071
8.1
23%
Jun 10
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1665
CVE-2025-32710
8.1
1%
Jun 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1611
CVE-2025-29828
8.1
1%
Jun 10
Windows Schannel Remote Code Execution Vulnerability
Affected: before 10.0.25398.1665
CVE-2025-27482
8.1
2%
Apr 8
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-27480
8.1
13%
Apr 8
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-26671
8.1
1%
Apr 8
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-26670
8.1
11%
Apr 8
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-26663
8.1
2%
Apr 8
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1551
CVE-2025-24064
8.1
1%
Mar 11
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: before 10.0.25398.1486
CVE-2025-24045
8.1
1%
Mar 11
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1486
CVE-2025-24035
8.1
2%
Mar 11
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1486
CVE-2025-21376
8.1
9%
Feb 11
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1425
CVE-2025-21224
8.1
2%
Jan 14
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21309
8.1
15%
Jan 14
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21297
8.1
1%
Jan 14
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21295
8.1
2%
Jan 14
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21294
8.1
1%
Jan 14
Microsoft Digest Authentication Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2024-49128
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49127
8.1
1%
Dec 10
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49118
8.1
1%
Dec 10
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49116
8.1
10%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49132
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49126
8.1
1%
Dec 10
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49124
8.1
1%
Dec 10
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49123
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49122
8.1
21%
Dec 10
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49120
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49119
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49115
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49108
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49106
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-43625
8.1
1%
Nov 12
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Affected: before 10.0.25398.1251
Page 6 of 10 · 463 total
1…567…10
The 500 most important CVEs for this product (exploited first, then by severity)