WS
Product
Windows Server 2022 23h2
On CISA KEVExploited in the wildRansomware-linked
1,676
CVEs
59
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 463Medium 11Low 0
Watch
Add Windows Server 2022 23h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40408 | 7.8 | May 12 | Windows WAN ARP Driver Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-40407 | 7.8 | May 12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-40399 | 7.8 | May 12 | Windows TCP/IP Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-40377 | 7.8 | May 12 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-35421 | 7.8 | May 12 | Windows GDI Remote Code Execution Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-35420 | 7.8 | May 12 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-35417 | 7.8 | May 12 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-35415 | 7.8 | May 12 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-34344 | 7.8 | May 12 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-34343 | 7.8 | May 12 | Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-34333 | 7.8 | May 12 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-34330 | 7.8 | May 12 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-33841 | 7.8 | May 12 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-33834 | 7.8 | May 12 | Windows Event Logging Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2330 |
| CVE-2026-33101 | 7.8 | Apr 14 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32164 | 7.8 | Apr 14 | Windows User Interface Core Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32163 | 7.8 | Apr 14 | Windows User Interface Core Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32155 | 7.8 | Apr 14 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32078 | 7.8 | Apr 14 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32077 | 7.8 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32076 | 7.8 | Apr 14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32074 | 7.8 | Apr 14 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32069 | 7.8 | Apr 14 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27923 | 7.8 | Apr 14 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27920 | 7.8 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27916 | 7.8 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27914 | 7.8 | Apr 14 | Microsoft Management Console Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27911 | 7.8 | Apr 14 | Windows User Interface Core Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27910 | 7.8 | Apr 14 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27909 | 7.8 | Apr 14 | Windows Search Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26184 | 7.8 | Apr 14 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26176 | 7.8 | Apr 14 | Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26172 | 7.8 | Apr 14 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26170 | 7.8 | Apr 14 | PowerShell Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26168 | 7.8 | Apr 14 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26163 | 7.8 | Apr 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26159 | 7.8 | Apr 14 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26156 | 7.8 | Apr 14 | Windows Hyper-V Remote Code Execution Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26153 | 7.8 | Apr 14 | Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-33098 | 7.8 | Apr 14 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32183 | 7.8 | Apr 14 | Windows Snipping Tool Remote Code Execution Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32165 | 7.8 | Apr 14 | Windows User Interface Core Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32160 | 7.8 | Apr 14 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32159 | 7.8 | Apr 14 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32158 | 7.8 | Apr 14 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32154 | 7.8 | Apr 14 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32152 | 7.8 | Apr 14 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-32089 | 7.8 | Apr 14 | Windows Speech Brokered Api Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27924 | 7.8 | Apr 14 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27919 | 7.8 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
The 500 most important CVEs for this product (exploited first, then by severity)