WS
Product
Windows Server 2022 23h2
On CISA KEVExploited in the wildRansomware-linked
1,676
CVEs
59
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 463Medium 11Low 0
Watch
Add Windows Server 2022 23h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27915 | 7.8 | Apr 14 | Windows UPnP Device Host Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-27907 | 7.8 | Apr 14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26183 | 7.8 | Apr 14 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26181 | 7.8 | Apr 14 | Microsoft Brokering File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26180 | 7.8 | Apr 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26179 | 7.8 | Apr 14 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26167 | 7.8 | Apr 14 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26162 | 7.8 | Apr 14 | Windows OLE Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26161 | 7.8 | Apr 14 | Windows Sensor Data Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26160 | 7.8 | Apr 14 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-20930 | 7.8 | Apr 14 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2274 |
| CVE-2026-26132 | 7.8 | Mar 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-26128 | 7.8 | Mar 10 | Windows SMB Server Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25190 | 7.8 | Mar 10 | Windows GDI Remote Code Execution Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25187 | 7.8 | Mar 10 | Winlogon Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25176 | 7.8 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25175 | 7.8 | Mar 10 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25174 | 7.8 | Mar 10 | Windows Extensible File Allocation Table Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25166 | 7.8 | Mar 10 | Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-25165 | 7.8 | Mar 10 | Performance Counters for Windows Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24294 | 7.8 | Mar 10 | Windows SMB Server Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24293 | 7.8 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24292 | 7.8 | Mar 10 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24291 | 7.8 | Mar 10 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24290 | 7.8 | Mar 10 | Windows Projected File System Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24289 | 7.8 | Mar 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-24287 | 7.8 | Mar 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-23673 | 7.8 | Mar 10 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-23672 | 7.8 | Mar 10 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2207 |
| CVE-2026-21231 | 7.8 | Feb 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21232 | 7.8 | Feb 10 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21238 | 7.8 | Feb 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21239 | 7.8 | Feb 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21250 | 7.8 | Feb 10 | Windows HTTP.sys Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21251 | 7.8 | Feb 10 | Cluster Client Failover (CCF) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21236 | 7.8 | Feb 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-21246 | 7.8 | Feb 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.25398.2149 |
| CVE-2026-20874 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20873 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20871 | 7.8 | Jan 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20867 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20866 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20861 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20843 | 7.8 | Jan 13 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20924 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20923 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20922 | 7.8 | Jan 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20920 | 7.8 | Jan 13 | Win32k Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20918 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
| CVE-2026-20877 | 7.8 | Jan 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.25398.2092 |
The 500 most important CVEs for this product (exploited first, then by severity)