Login Request a demo
WS
Product
Windows Server 2022 23h2
by Microsoft · last CVE May 12, 2026
On CISA KEVExploited in the wildRansomware-linked
1,676
CVEs
59
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities1,676In the news12Timeline
Severity mix
Critical 26High 463Medium 11Low 0
Severity
All severities500Critical26High463Medium11Low0
Exploitation
On CISA KEV59Exploited in the wild59
Watch

Add Windows Server 2022 23h2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33827
8.1
1%
Apr 14
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.25398.2274
CVE-2026-20856
8.1
1%
Jan 13
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.2092
CVE-2025-50177
8.1
4%
Aug 12
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1791
CVE-2025-49735
8.1
1%
Jul 8
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1665
CVE-2025-33071
8.1
23%
Jun 10
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1665
CVE-2025-33070
8.1
10%
Jun 10
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network
Affected: before 10.0.25398.1665
CVE-2025-32710
8.1
1%
Jun 10
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1611
CVE-2025-29828
8.1
1%
Jun 10
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1665
CVE-2025-27482
8.1
2%
Apr 8
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1551
CVE-2025-27480
8.1
13%
Apr 8
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1551
CVE-2025-26671
8.1
1%
Apr 8
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1551
CVE-2025-26670
8.1
11%
Apr 8
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1551
CVE-2025-26663
8.1
2%
Apr 8
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1551
CVE-2025-24064
8.1
1%
Mar 11
Use after free in DNS Server allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1486
CVE-2025-24045
8.1
1%
Mar 11
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1486
CVE-2025-24035
8.1
2%
Mar 11
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1486
CVE-2025-21376
8.1
9%
Feb 11
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1425
CVE-2025-21309
8.1
15%
Jan 14
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21297
8.1
1%
Jan 14
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21295
8.1
2%
Jan 14
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21294
8.1
1%
Jan 14
Microsoft Digest Authentication Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2025-21224
8.1
2%
Jan 14
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: before 10.0.25398.1369
CVE-2024-49132
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49128
8.1
1%
Dec 12
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.25398.1308
CVE-2024-49127
8.1
1%
Dec 12
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49126
8.1
1%
Dec 12
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49124
8.1
1%
Dec 12
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49123
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49122
8.1
21%
Dec 12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49120
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49119
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49118
8.1
1%
Dec 12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49116
8.1
10%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49115
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49108
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-49106
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.1308
CVE-2024-43625
8.1
1%
Nov 12
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Affected: before 10.0.25398.1251
CVE-2024-43582
8.1
3%
Oct 8
Remote Desktop Protocol Server Remote Code Execution Vulnerability
Affected: before 10.0.25398.1189
CVE-2024-38045
8.1
1%
Sep 10
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.25398.1128
CVE-2024-38049
8.1
2%
Jul 9
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Affected: before 10.0.25398.1009
CVE-2024-30020
8.1
1%
May 14
Windows Cryptographic Services Remote Code Execution Vulnerability
Affected: before 10.0.25398.887
CVE-2024-21407
8.1
16%
Mar 12
Windows Hyper-V Remote Code Execution Vulnerability
Affected: before 10.0.25398.763
CVE-2024-21357
8.1
27%
Feb 13
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.25398.709
CVE-2023-35628
8.1
93%
Dec 12
Windows MSHTML Platform Remote Code Execution Vulnerability
Affected: before 10.0.25398.584
CVE-2026-27912
8.0
0%
Apr 14
Windows Kerberos Elevation of Privilege Vulnerability
Affected: before 10.0.25398.2274
CVE-2026-33826
8.0
1%
Apr 14
Windows Active Directory Remote Code Execution Vulnerability
Affected: before 10.0.25398.2274
CVE-2026-25173
8.0
1%
Mar 10
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.2207
CVE-2026-25172
8.0
1%
Mar 10
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.2207
CVE-2026-20931
8.0
1%
Jan 13
Windows Telephony Service Elevation of Privilege Vulnerability
Affected: before 10.0.25398.2092
CVE-2025-60715
8.0
1%
Nov 11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: before 10.0.25398.1965
Page 7 of 10 · 500 total
1…678…10
The 500 most important CVEs for this product (exploited first, then by severity)