# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-41097.md)
  `CVE-2026-41097` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-1329
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40413.md)
  `CVE-2026-40413` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40403.md)
  `CVE-2026-40403` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40401.md)
  `CVE-2026-40401` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40398.md)
  `CVE-2026-40398` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-32209.md)
  `CVE-2026-32209` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Broken access control
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40397.md)
  `CVE-2026-40397` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40382.md)
  `CVE-2026-40382` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34341.md)
  `CVE-2026-34341` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34340.md)
  `CVE-2026-34340` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-34339.md)
  `CVE-2026-34339` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34338.md)
  `CVE-2026-34338` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34337.md)
  `CVE-2026-34337` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34336.md)
  `CVE-2026-34336` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34334.md)
  `CVE-2026-34334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33838.md)
  `CVE-2026-33838` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Local Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33837.md)
  `CVE-2026-33837` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33835.md)
  `CVE-2026-33835` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42825.md)
  `CVE-2026-42825` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Rich Text Edit Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-32170.md)
  `CVE-2026-32170` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-32161.md)
  `CVE-2026-32161` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows DNS Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41096.md)
  `CVE-2026-41096` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Data Deduplication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41095.md)
  `CVE-2026-41095` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Netlogon Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41089.md)
  `CVE-2026-41089` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.80 · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41088.md)
  `CVE-2026-41088` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Path traversal
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40415.md)
  `CVE-2026-40415` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40414.md)
  `CVE-2026-40414` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows SMB Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40410.md)
  `CVE-2026-40410` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows WAN ARP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40408.md)
  `CVE-2026-40408` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40407.md)
  `CVE-2026-40407` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-40406.md)
  `CVE-2026-40406` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40399.md)
  `CVE-2026-40399` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40380.md)
  `CVE-2026-40380` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption, CWE-197
- [Microsoft Cryptographic Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40377.md)
  `CVE-2026-40377` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-35424.md)
  `CVE-2026-35424` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service
- [Windows 11 Telnet Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-35423.md)
  `CVE-2026-35423` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Driver Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-35422.md)
  `CVE-2026-35422` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Authentication bypass
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-35421.md)
  `CVE-2026-35421` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35420.md)
  `CVE-2026-35420` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35418.md)
  `CVE-2026-35418` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35417.md)
  `CVE-2026-35417` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35416.md)
  `CVE-2026-35416` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35415.md)
  `CVE-2026-35415` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34351.md)
  `CVE-2026-34351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34347.md)
  `CVE-2026-34347` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34345.md)
  `CVE-2026-34345` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34344.md)
  `CVE-2026-34344` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34343.md)
  `CVE-2026-34343` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34342.md)
  `CVE-2026-34342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34333.md)
  `CVE-2026-34333` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34331.md)
  `CVE-2026-34331` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34330.md)
  `CVE-2026-34330` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-34329.md)
  `CVE-2026-34329` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33841.md)
  `CVE-2026-33841` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33839.md)
  `CVE-2026-33839` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Event Logging Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33834.md)
  `CVE-2026-33834` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Broken access control
- [Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-32214.md)
  `CVE-2026-32214` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Broken access control
- [Windows Snipping Tool Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-33829.md)
  `CVE-2026-33829` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Information disclosure
- [Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-33824.md)
  `CVE-2026-33824` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.77 · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-33827.md)
  `CVE-2026-33827` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Apr 2026 · Tags: Race condition

Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDI2LTA0LTE0VDE2OjU4OjQ0LjY3NzAwMFoiLCJDVkUtMjAyNi0zMzgyNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/>. Everything for agents: <https://agentprime.io/llms.txt>.