Login Request a demo
WS
Product
Windows Server 2022
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
4,956
CVEs
109
On KEV
9.9
Max CVSS
985
New 30D
Vulnerabilities4,956In the news12Timeline
Severity mix
Critical 179High 302Medium 19Low 0
Severity
All severities500Critical179High302Medium19Low0
Exploitation
On CISA KEV109Exploited in the wild109
Watch

Add Windows Server 2022 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-32056
9.8
1%
Jul 11
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2023-32015
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.20348.1787
CVE-2023-32014
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.20348.1787
CVE-2023-29363
9.8
2%
Jun 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.20348.1787
CVE-2022-35744
9.8
2%
May 31
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-24943
9.8
5%
May 9
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-24941
9.8
95%
May 9
Windows Network File System Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-28250
9.8
2%
Apr 11
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21554
9.8
95%
Apr 11
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-23415
9.8
3%
Mar 14
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-23392
9.8
2%
Mar 14
HTTP Protocol Stack Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21708
9.8
1%
Mar 14
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21692
9.8
21%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21690
9.8
28%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-21689
9.8
27%
Feb 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34722
9.8
3%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34721
9.8
76%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34718
9.8
55%
Sep 13
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34715
9.8
80%
Aug 9
Windows Network File System Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.887
CVE-2022-30133
9.8
3%
Aug 9
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.887
CVE-2022-29130
9.8
4%
May 10
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-26937
9.8
76%
May 10
Windows Network File System Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-26809
9.8
91%
Apr 15
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-24497
9.8
35%
Apr 15
Windows Network File System Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-24491
9.8
33%
Apr 15
Windows Network File System Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-50380
9.6
1%
Jul 14
Windows GDI+ Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5386
CVE-2026-42904
9.6
0%
Jun 9
Windows TCP/IP Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5256
CVE-2026-49798
9.3
0%
Jul 14
Windows Kernel Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5386
CVE-2026-40402
9.3
0%
May 12
Windows Hyper-V Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5139
CVE-2026-96252
9.1
1%
Oct 13
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-45602
9.1
0%
Jun 9
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5256
CVE-2025-50171
9.1
1%
Aug 12
Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network
Affected: before 10.0.20348.3989
CVE-2026-105008
9.0
1%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-85818
9.0
0%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2024-38124
9.0
1%
Oct 8
Windows Netlogon Elevation of Privilege Vulnerability
Affected: before 10.0.20348.2762
CVE-2021-26443
9.0
2%
Nov 10
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-105007
8.8
1%
Oct 13
Windows NDIS Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-103575
8.8
1%
Oct 13
Remote Desktop Client Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-102225
8.8
1%
Oct 13
Windows Text Shaping Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-102217
8.8
1%
Oct 13
WebDAV Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-102214
8.8
0%
Oct 13
Windows Hyper-V Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-102203
8.8
1%
Oct 13
RPC Runtime Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-88219
8.8
1%
Oct 13
RPC Runtime Library Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-100220
8.8
1%
Oct 13
Windows Media Video Decoder Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-96952
8.8
1%
Oct 13
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-96917
8.8
0%
Oct 13
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-96914
8.8
0%
Oct 13
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-88116
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-88114
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
CVE-2026-88112
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.20348.0 before 10.0.20348.5761
Page 6 of 10 · 500 total
1…567…10
The 500 most important CVEs for this product (exploited first, then by severity)