WS
Product
Windows Server 2022
On CISA KEVExploited in the wildRansomware-linked
4,956
CVEs
109
On KEV
9.9
Max CVSS
985
New 30D
Severity mix
Critical 176High 305Medium 19Low 0
Watch
Add Windows Server 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-29966 | 8.8 | May 13 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network Affected: before 10.0.20348.3692 |
| CVE-2025-29964 | 8.8 | May 13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network Affected: before 10.0.20348.3692 |
| CVE-2025-29963 | 8.8 | May 13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network Affected: before 10.0.20348.3692 |
| CVE-2025-29962 | 8.8 | May 13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network Affected: before 10.0.20348.3692 |
| CVE-2025-29840 | 8.8 | May 13 | Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network Affected: before 10.0.20348.3692 |
The 500 most important CVEs for this product (exploited first, then by severity)