# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Secure Channel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27492.md)
  `CVE-2025-27492` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition, Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27482.md)
  `CVE-2025-27482` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27480.md)
  `CVE-2025-27480` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27467.md)
  `CVE-2025-27467` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Defender Application Control Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26678.md)
  `CVE-2025-26678` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.4 High · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26676.md)
  `CVE-2025-26676` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26675.md)
  `CVE-2025-26675` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26674.md)
  `CVE-2025-26674` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26671.md)
  `CVE-2025-26671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26651.md)
  `CVE-2025-26651` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-749
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26647.md)
  `CVE-2025-26647` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Secure Channel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26649.md)
  `CVE-2025-26649` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition, Memory corruption
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26640.md)
  `CVE-2025-26640` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26637.md)
  `CVE-2025-26637` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-693
- [Windows Hello Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26635.md)
  `CVE-2025-26635` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Authentication bypass
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26639.md)
  `CVE-2025-26639` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24058.md)
  `CVE-2025-24058` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21203.md)
  `CVE-2025-21203` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24073.md)
  `CVE-2025-24073` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24074.md)
  `CVE-2025-24074` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Active Directory Certificate Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27740.md)
  `CVE-2025-27740` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Authentication bypass
- [Kerberos Key Distribution Proxy Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27479.md)
  `CVE-2025-27479` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-410
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27476.md)
  `CVE-2025-27476` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27474.md)
  `CVE-2025-27474` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26688.md)
  `CVE-2025-26688` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26681.md)
  `CVE-2025-26681` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26667.md)
  `CVE-2025-26667` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26666.md)
  `CVE-2025-26666` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26664.md)
  `CVE-2025-26664` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24984.md)
  `CVE-2025-24984` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.6 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Mar 2025 · Tags: Information disclosure
- [Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24084.md)
  `CVE-2025-24084` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24076.md)
  `CVE-2025-24076` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: Broken access control
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-24071.md)
  `CVE-2025-24071` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · EPSS 0.23 · Not analysed yet · Published 11 Mar 2025 · Tags: Information disclosure
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24067.md)
  `CVE-2025-24067` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24066.md)
  `CVE-2025-24066` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24064.md)
  `CVE-2025-24064` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-24061.md)
  `CVE-2025-24061` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-693
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24050.md)
  `CVE-2025-24050` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24048.md)
  `CVE-2025-24048` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24046.md)
  `CVE-2025-24046` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24045.md)
  `CVE-2025-24045` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-591
- [Windows Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-25008.md)
  `CVE-2025-25008` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: Path traversal
- [DirectX Graphics Kernel File Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-24997.md)
  `CVE-2025-24997` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24995.md)
  `CVE-2025-24995` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24044.md)
  `CVE-2025-24044` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-26634.md)
  `CVE-2025-26634` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21414.md)
  `CVE-2025-21414` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21254.md)
  `CVE-2025-21254` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21216.md)
  `CVE-2025-21216` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21212.md)
  `CVE-2025-21212` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21184.md)
  `CVE-2025-21184` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21367.md)
  `CVE-2025-21367` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21358.md)
  `CVE-2025-21358` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Remote Desktop Configuration Service Tampering Vulnerability](https://agentprime.io/advisories/CVE-2025-21349.md)
  `CVE-2025-21349` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Authentication bypass
- [Windows Deployment Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21347.md)
  `CVE-2025-21347` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21410.md)
  `CVE-2025-21410` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21208.md)
  `CVE-2025-21208` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Disk Cleanup Tool Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21420.md)
  `CVE-2025-21420` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21391.md)
  `CVE-2025-21391` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal
- [Windows Active Directory Domain Services API Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21351.md)
  `CVE-2025-21351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2025 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDI1LTAyLTExVDE3OjU4OjA4Ljk2MTAwMFoiLCJDVkUtMjAyNS0yMTM1MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation&cursor=WyIyMDI1LTA0LTA4VDE3OjI0OjA0LjAwMDAwMFoiLCJDVkUtMjAyNS0yNzQ5MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/?cursor=WyIyMDI1LTA0LTA4VDE3OjI0OjA0LjAwMDAwMFoiLCJDVkUtMjAyNS0yNzQ5MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.