Windows Server 2022 23h2 (Microsoft) - vulnerabilities (CVEs)

1676 CVEs, 0 in the last 30 days, 82 known versions, newest CVE from 2026-05-12. Vendor: Microsoft.

CVEs of Windows Server 2022 23h2

CVE-2026-42825 - CVSS 7 (high), 2026-05-12: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-41096 - CVSS 9.8 (critical), 2026-05-12: Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-41095 - CVSS 7.8 (high), 2026-05-12: Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.
CVE-2026-41097 - CVSS 6.7 (medium), 2026-05-12: Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-41088 - CVSS 7.8 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…
CVE-2026-41089 - CVSS 9.8 (critical), 2026-05-12: Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-40413 - CVSS 7.4 (high), 2026-05-12: Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40415 - CVSS 8.1 (high), 2026-05-12: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40414 - CVSS 7.4 (high), 2026-05-12: Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40407 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-40406 - CVSS 7.5 (high), 2026-05-12: Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40410 - CVSS 7 (high), 2026-05-12: Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-40403 - CVSS 8.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
CVE-2026-40408 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-40382 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-40399 - CVSS 7.8 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate…
CVE-2026-40398 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
CVE-2026-40397 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-40401 - CVSS 7.1 (high), 2026-05-12: Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40380 - CVSS 6.2 (medium), 2026-05-12: Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.
CVE-2026-40377 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
CVE-2026-35424 - CVSS 7.5 (high), 2026-05-12: Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a…
CVE-2026-35423 - CVSS 5.4 (medium), 2026-05-12: Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-35417 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-35421 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
CVE-2026-35420 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-35418 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-35422 - CVSS 6.5 (medium), 2026-05-12: Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.
CVE-2026-35416 - CVSS 7 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…
CVE-2026-35415 - CVSS 7.8 (high), 2026-05-12: Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-34347 - CVSS 7 (high), 2026-05-12: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34345 - CVSS 7 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…
CVE-2026-34344 - CVSS 7.8 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…
CVE-2026-34351 - CVSS 7.8 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate…
CVE-2026-34340 - CVSS 7 (high), 2026-05-12: Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-34343 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-34339 - CVSS 5.5 (medium), 2026-05-12: Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.
CVE-2026-34342 - CVSS 7 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker…
CVE-2026-34341 - CVSS 7 (high), 2026-05-12: Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
CVE-2026-34333 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34337 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-34336 - CVSS 7.8 (high), 2026-05-12: Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-34334 - CVSS 7.8 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate…
CVE-2026-34338 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-33841 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-34331 - CVSS 7 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate…
CVE-2026-33839 - CVSS 7 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate…
CVE-2026-34330 - CVSS 7.8 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate…
CVE-2026-34329 - CVSS 8.8 (high), 2026-05-12: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-33837 - CVSS 7.8 (high), 2026-05-12: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-33835 - CVSS 7.8 (high), 2026-05-12: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-33834 - CVSS 7.8 (high), 2026-05-12: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-33838 - CVSS 7.8 (high), 2026-05-12: Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-32209 - CVSS 4.4 (medium), 2026-05-12: Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
CVE-2026-32170 - CVSS 6.7 (medium), 2026-05-12: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-32161 - CVSS 7.5 (high), 2026-05-12: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized…
CVE-2026-21530 - CVSS 6.7 (medium), 2026-05-12: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-33826 - CVSS 8 (high), 2026-04-14: Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
CVE-2026-33829 - CVSS 4.3 (medium), 2026-04-14: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33827 - CVSS 8.1 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code…
CVE-2026-33824 - CVSS 9.8 (critical), 2026-04-14: Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-33104 - CVSS 7 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate…
CVE-2026-33100 - CVSS 7 (high), 2026-04-14: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-33099 - CVSS 7 (high), 2026-04-14: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-33101 - CVSS 7.8 (high), 2026-04-14: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-33096 - CVSS 7.5 (high), 2026-04-14: Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
CVE-2026-33098 - CVSS 7.8 (high), 2026-04-14: Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-32225 - CVSS 8.8 (high), 2026-04-14: Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security…
CVE-2026-32217 - CVSS 5.5 (medium), 2026-04-14: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-32218 - CVSS 5.5 (medium), 2026-04-14: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-32215 - CVSS 5.5 (medium), 2026-04-14: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-32214 - CVSS 5.5 (medium), 2026-04-14: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
CVE-2026-32212 - CVSS 5.5 (medium), 2026-04-14: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information…
CVE-2026-32202 - CVSS 4.3 (medium), 2026-04-14: Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-32181 - CVSS 5.5 (medium), 2026-04-14: Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.
CVE-2026-32183 - CVSS 7.8 (high), 2026-04-14: Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code…
CVE-2026-32165 - CVSS 7.8 (high), 2026-04-14: Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
CVE-2026-32162 - CVSS 8.4 (high), 2026-04-14: Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32164 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to…
CVE-2026-32163 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to…
CVE-2026-32158 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to…
CVE-2026-32157 - CVSS 8.8 (high), 2026-04-14: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-32160 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to…
CVE-2026-32159 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to…
CVE-2026-32155 - CVSS 7.8 (high), 2026-04-14: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32154 - CVSS 7.8 (high), 2026-04-14: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32156 - CVSS 7.4 (high), 2026-04-14: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.
CVE-2026-32151 - CVSS 6.5 (medium), 2026-04-14: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.
CVE-2026-32150 - CVSS 7 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized…
CVE-2026-32152 - CVSS 7.8 (high), 2026-04-14: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-32093 - CVSS 7 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized…
CVE-2026-32091 - CVSS 8.4 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker…
CVE-2026-32149 - CVSS 7.3 (high), 2026-04-14: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-32088 - CVSS 6.1 (medium), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to…
CVE-2026-32090 - CVSS 7.8 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to…
CVE-2026-32089 - CVSS 7.8 (high), 2026-04-14: Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.
CVE-2026-32085 - CVSS 5.5 (medium), 2026-04-14: Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally.
CVE-2026-32087 - CVSS 7 (high), 2026-04-14: Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-32086 - CVSS 7 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized…
CVE-2026-32082 - CVSS 7 (high), 2026-04-14: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate…