# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Trusted Compute Base Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21304.md)
  `CVE-2024-21304` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-20
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21371.md)
  `CVE-2024-21371` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 13 Feb 2024 · Tags: Race condition
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21338.md)
  `CVE-2024-21338` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.62 · Not analysed yet · Published 13 Feb 2024 · Tags: Memory corruption
- [Microsoft Message Queuing Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21314.md)
  `CVE-2024-21314` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Cryptographic Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21311.md)
  `CVE-2024-21311` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21310.md)
  `CVE-2024-21310` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-197
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21309.md)
  `CVE-2024-21309` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Bluetooth Driver Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-21306.md)
  `CVE-2024-21306` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Authentication bypass
- [Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20692.md)
  `CVE-2024-20692` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Weak cryptography or TLS
- [Microsoft AllJoyn API Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20687.md)
  `CVE-2024-20687` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20686.md)
  `CVE-2024-20686` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-591
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20681.md)
  `CVE-2024-20681` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Server Key Distribution Service Security Feature Bypass](https://agentprime.io/advisories/CVE-2024-21316.md)
  `CVE-2024-21316` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-20
- [Microsoft Message Queuing Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20664.md)
  `CVE-2024-20664` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Message Queuing Client (MSMQC) Information Disclosure](https://agentprime.io/advisories/CVE-2024-20663.md)
  `CVE-2024-20663` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20662.md)
  `CVE-2024-20662` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20661.md)
  `CVE-2024-20661` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Message Queuing Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20660.md)
  `CVE-2024-20660` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20655.md)
  `CVE-2024-20655` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Common Log File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20653.md)
  `CVE-2024-20653` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows HTML Platforms Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20652.md)
  `CVE-2024-20652` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jan 2024 · Tags: Path traversal
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21313.md)
  `CVE-2024-21313` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Information disclosure
- [Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-21305.md)
  `CVE-2024-21305` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Broken access control
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20700.md)
  `CVE-2024-20700` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jan 2024 · Tags: Race condition
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20699.md)
  `CVE-2024-20699` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-755
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20698.md)
  `CVE-2024-20698` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows libarchive Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20697.md)
  `CVE-2024-20697` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 7.3 High · Critical (CVSS 7+ and EPSS) · EPSS 0.72 · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows libarchive Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20696.md)
  `CVE-2024-20696` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows CoreMessaging Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20694.md)
  `CVE-2024-20694` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Themes Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20691.md)
  `CVE-2024-20691` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20683.md)
  `CVE-2024-20683` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Cryptographic Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20682.md)
  `CVE-2024-20682` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Message Queuing Client (MSMQC) Information Disclosure](https://agentprime.io/advisories/CVE-2024-20680.md)
  `CVE-2024-20680` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20658.md)
  `CVE-2024-20658` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Group Policy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20657.md)
  `CVE-2024-20657` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jan 2024 · Tags: Broken access control
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-20654.md)
  `CVE-2024-20654` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Jan 2024 · Tags: Memory corruption
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20674.md)
  `CVE-2024-20674` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-305
- [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20666.md)
  `CVE-2024-20666` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-20
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-44684.md)
  `CVE-2022-44684` · CVE record: Microsoft Windows 10 Version 21H1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Dec 2023
- [Windows DNS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-35622.md)
  `CVE-2023-35622` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: Authentication bypass
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35631.md)
  `CVE-2023-35631` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023
- [Internet Connection Sharing (ICS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35630.md)
  `CVE-2023-35630` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows MSHTML Platform Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35628.md)
  `CVE-2023-35628` · CVE record: Microsoft Windows 11 Version 23H2 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.93 · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Sysmain Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35644.md)
  `CVE-2023-35644` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [DHCP Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-35643.md)
  `CVE-2023-35643` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-126
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35642.md)
  `CVE-2023-35642` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-682
- [Internet Connection Sharing (ICS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35641.md)
  `CVE-2023-35641` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-682
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35639.md)
  `CVE-2023-35639` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35638.md)
  `CVE-2023-35638` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-126
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36006.md)
  `CVE-2023-36006` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36005.md)
  `CVE-2023-36005` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-591
- [Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36004.md)
  `CVE-2023-36004` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: Authentication bypass
- [XAML Diagnostics Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36003.md)
  `CVE-2023-36003` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-426
- [DHCP Server Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36012.md)
  `CVE-2023-36012` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21740.md)
  `CVE-2023-21740` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36011.md)
  `CVE-2023-36011` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36696.md)
  `CVE-2023-36696` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows SmartScreen Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-36025.md)
  `CVE-2023-36025` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.88 · Not analysed yet · Published 14 Nov 2023
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36033.md)
  `CVE-2023-36033` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.11 · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36028.md)
  `CVE-2023-36028` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDIzLTExLTE0VDE3OjU3OjM0Ljg5MjAwMFoiLCJDVkUtMjAyMy0zNjAyOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation&cursor=WyIyMDI0LTAyLTEzVDE4OjAyOjI5LjM3NDAwMFoiLCJDVkUtMjAyNC0yMDY4NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/?cursor=WyIyMDI0LTAyLTEzVDE4OjAyOjI5LjM3NDAwMFoiLCJDVkUtMjAyNC0yMDY4NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.
