# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26205.md)
  `CVE-2024-26205` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26200.md)
  `CVE-2024-26200` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26179.md)
  `CVE-2024-26179` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Windows DWM Core Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26172.md)
  `CVE-2024-26172` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Libarchive Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26256.md)
  `CVE-2024-26256` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26255.md)
  `CVE-2024-26255` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-126
- [Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-26254.md)
  `CVE-2024-26254` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Windows rndismp6.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26253.md)
  `CVE-2024-26253` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-20
- [Windows rndismp6.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26252.md)
  `CVE-2024-26252` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26250.md)
  `CVE-2024-26250` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20669.md)
  `CVE-2024-20669` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-693
- [Windows Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-26181.md)
  `CVE-2024-26181` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26178.md)
  `CVE-2024-26178` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26177.md)
  `CVE-2024-26177` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Information disclosure
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26176.md)
  `CVE-2024-26176` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-126
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26174.md)
  `CVE-2024-26174` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26173.md)
  `CVE-2024-26173` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20
- [Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26170.md)
  `CVE-2024-26170` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26169.md)
  `CVE-2024-26169` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Mar 2024 · Tags: Privilege escalation
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26166.md)
  `CVE-2024-26166` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26162.md)
  `CVE-2024-26162` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-681
- [Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-26160.md)
  `CVE-2024-26160` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 5.5 Medium · EPSS 0.11 · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-126
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21440.md)
  `CVE-2024-21440` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21437.md)
  `CVE-2024-21437` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21436.md)
  `CVE-2024-21436` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Broken access control
- [Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21434.md)
  `CVE-2024-21434` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21433.md)
  `CVE-2024-21433` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Race condition
- [Windows Update Stack Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21432.md)
  `CVE-2024-21432` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Path traversal
- [Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21431.md)
  `CVE-2024-21431` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Broken access control
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21427.md)
  `CVE-2024-21427` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Authentication bypass
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21408.md)
  `CVE-2024-21408` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Denial of service
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21407.md)
  `CVE-2024-21407` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26161.md)
  `CVE-2024-26161` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft QUIC Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-26190.md)
  `CVE-2024-26190` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.9 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Denial of service
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26159.md)
  `CVE-2024-26159` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21451.md)
  `CVE-2024-21451` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21450.md)
  `CVE-2024-21450` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21446.md)
  `CVE-2024-21446` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-591
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21445.md)
  `CVE-2024-21445` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21444.md)
  `CVE-2024-21444` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21443.md)
  `CVE-2024-21443` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21442.md)
  `CVE-2024-21442` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-170
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21441.md)
  `CVE-2024-21441` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21439.md)
  `CVE-2024-21439` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Microsoft AllJoyn API Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21438.md)
  `CVE-2024-21438` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Denial of service
- [Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21430.md)
  `CVE-2024-21430` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption
- [Windows USB Hub Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21429.md)
  `CVE-2024-21429` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Internet Shortcut Files Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21412.md)
  `CVE-2024-21412` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.99 · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-693
- [Windows DNS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21377.md)
  `CVE-2024-21377` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Windows Kernel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21362.md)
  `CVE-2024-21362` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Race condition
- [Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21353.md)
  `CVE-2024-21353` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21348.md)
  `CVE-2024-21348` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21346.md)
  `CVE-2024-21346` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21345.md)
  `CVE-2024-21345` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.20 · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21344.md)
  `CVE-2024-21344` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21343.md)
  `CVE-2024-21343` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows DNS Client Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21342.md)
  `CVE-2024-21342` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: Denial of service
- [Windows Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21341.md)
  `CVE-2024-21341` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows USB Generic Parent Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21339.md)
  `CVE-2024-21339` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20684.md)
  `CVE-2024-20684` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-20

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDI0LTAyLTEzVDE4OjAyOjI5LjM3NDAwMFoiLCJDVkUtMjAyNC0yMDY4NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation&cursor=WyIyMDI0LTA0LTA5VDE3OjAwOjE0Ljg5NDAwMFoiLCJDVkUtMjAyNC0yNjE1OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/?cursor=WyIyMDI0LTA0LTA5VDE3OjAwOjE0Ljg5NDAwMFoiLCJDVkUtMjAyNC0yNjE1OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.