# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21334.md)
  `CVE-2025-21334` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21333.md)
  `CVE-2025-21333` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows NTLM V1 Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21311.md)
  `CVE-2025-21311` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2025 · Tags: Authentication bypass
- [Internet Explorer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21326.md)
  `CVE-2025-21326` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) and 2 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Security Account Manager (SAM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21313.md)
  `CVE-2025-21313` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21218.md)
  `CVE-2025-21218` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Windows CSC Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21378.md)
  `CVE-2025-21378` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows CSC Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21374.md)
  `CVE-2025-21374` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21372.md)
  `CVE-2025-21372` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21340.md)
  `CVE-2025-21340` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21323.md)
  `CVE-2025-21323` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21317.md)
  `CVE-2025-21317` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Windows Smart Card Reader Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21312.md)
  `CVE-2025-21312` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 2.4 Low · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21292.md)
  `CVE-2025-21292` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Code injection
- [Windows App Package Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21275.md)
  `CVE-2025-21275` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Event Tracing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21274.md)
  `CVE-2025-21274` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21229.md)
  `CVE-2025-21229` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21225.md)
  `CVE-2025-21225` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21224.md)
  `CVE-2025-21224` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption, CWE-591
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21213.md)
  `CVE-2025-21213` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21211.md)
  `CVE-2025-21211` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-693
- [Windows Recovery Environment Agent Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21202.md)
  `CVE-2025-21202` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21207.md)
  `CVE-2025-21207` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Active Directory Federation Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21193.md)
  `CVE-2025-21193` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF)
- [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21335.md)
  `CVE-2025-21335` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21330.md)
  `CVE-2025-21330` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21278.md)
  `CVE-2025-21278` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition
- [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21219.md)
  `CVE-2025-21219` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-41
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21382.md)
  `CVE-2025-21382` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21321.md)
  `CVE-2025-21321` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21318.md)
  `CVE-2025-21318` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21316.md)
  `CVE-2025-21316` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21315.md)
  `CVE-2025-21315` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows SmartScreen Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21314.md)
  `CVE-2025-21314` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-451
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21309.md)
  `CVE-2025-21309` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-591
- [Windows Geolocation Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21301.md)
  `CVE-2025-21301` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21299.md)
  `CVE-2025-21299` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21297.md)
  `CVE-2025-21297` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21293.md)
  `CVE-2025-21293` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Direct Show Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21291.md)
  `CVE-2025-21291` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Virtual Trusted Platform Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21284.md)
  `CVE-2025-21284` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20
- [Microsoft COM for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21281.md)
  `CVE-2025-21281` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Virtual Trusted Platform Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21280.md)
  `CVE-2025-21280` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20
- [Windows WLAN AutoConfig Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21257.md)
  `CVE-2025-21257` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21248.md)
  `CVE-2025-21248` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21241.md)
  `CVE-2025-21241` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21239.md)
  `CVE-2025-21239` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21235.md)
  `CVE-2025-21235` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20
- [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21234.md)
  `CVE-2025-21234` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49128.md)
  `CVE-2024-49128` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49116.md)
  `CVE-2024-49116` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49114.md)
  `CVE-2024-49114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-820
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49110.md)
  `CVE-2024-49110` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49109.md)
  `CVE-2024-49109` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49095.md)
  `CVE-2024-49095` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49083.md)
  `CVE-2024-49083` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49081.md)
  `CVE-2024-49081` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Input Method Editor (IME) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49079.md)
  `CVE-2024-49079` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49078.md)
  `CVE-2024-49078` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49077.md)
  `CVE-2024-49077` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjM4LjI5NDAwMFoiLCJDVkUtMjAyNC00OTA3NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation&cursor=WyIyMDI1LTAyLTExVDE3OjU4OjA4Ljk2MTAwMFoiLCJDVkUtMjAyNS0yMTM1MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/?cursor=WyIyMDI1LTAyLTExVDE3OjU4OjA4Ljk2MTAwMFoiLCJDVkUtMjAyNS0yMTM1MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.