# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Desktop Window Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21519.md)
  `CVE-2026-21519` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20939.md)
  `CVE-2026-20939` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20937.md)
  `CVE-2026-20937` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20929.md)
  `CVE-2026-20929` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20874.md)
  `CVE-2026-20874` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20873.md)
  `CVE-2026-20873` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Desktop Window Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20871.md)
  `CVE-2026-20871` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20867.md)
  `CVE-2026-20867` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20866.md)
  `CVE-2026-20866` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20863.md)
  `CVE-2026-20863` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20862.md)
  `CVE-2026-20862` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20861.md)
  `CVE-2026-20861` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20848.md)
  `CVE-2026-20848` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20934.md)
  `CVE-2026-20934` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20932.md)
  `CVE-2026-20932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20926.md)
  `CVE-2026-20926` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20924.md)
  `CVE-2026-20924` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20923.md)
  `CVE-2026-20923` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20920.md)
  `CVE-2026-20920` · CVE record: Microsoft Windows 11 version 23H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20919.md)
  `CVE-2026-20919` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20918.md)
  `CVE-2026-20918` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20877.md)
  `CVE-2026-20877` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20876.md)
  `CVE-2026-20876` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20865.md)
  `CVE-2026-20865` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20864.md)
  `CVE-2026-20864` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20858.md)
  `CVE-2026-20858` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20857.md)
  `CVE-2026-20857` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Server Update Service (WSUS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20856.md)
  `CVE-2026-20856` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-20
- [Windows Hello Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-20852.md)
  `CVE-2026-20852` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Privilege escalation
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-20847.md)
  `CVE-2026-20847` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Clipboard Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20844.md)
  `CVE-2026-20844` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20842.md)
  `CVE-2026-20842` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20839.md)
  `CVE-2026-20839` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20838.md)
  `CVE-2026-20838` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20837.md)
  `CVE-2026-20837` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20836.md)
  `CVE-2026-20836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Capability Access Management Service (camsvc) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20835.md)
  `CVE-2026-20835` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Kerberos Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20833.md)
  `CVE-2026-20833` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Weak cryptography or TLS
- [Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20832.md)
  `CVE-2026-20832` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [TPM Trustlet Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20829.md)
  `CVE-2026-20829` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20827.md)
  `CVE-2026-20827` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20826.md)
  `CVE-2026-20826` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20825.md)
  `CVE-2026-20825` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Windows Remote Assistance Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20824.md)
  `CVE-2026-20824` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-693
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20823.md)
  `CVE-2026-20823` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20822.md)
  `CVE-2026-20822` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20818.md)
  `CVE-2026-20818` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20817.md)
  `CVE-2026-20817` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-280
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20814.md)
  `CVE-2026-20814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [LDAP Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-20812.md)
  `CVE-2026-20812` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-20
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20811.md)
  `CVE-2026-20811` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Kernel Memory Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20809.md)
  `CVE-2026-20809` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, Race condition
- [Windows File Explorer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20808.md)
  `CVE-2026-20808` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Desktop Window Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20805.md)
  `CVE-2026-20805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Hello Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-20804.md)
  `CVE-2026-20804` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Privilege escalation
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-0386.md)
  `CVE-2026-0386` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Broken access control
- [Secure Boot Certificate Expiration Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21265.md)
  `CVE-2026-21265` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-1329
- [Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20962.md)
  `CVE-2026-20962` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62221.md)
  `CVE-2025-62221` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64680.md)
  `CVE-2025-64680` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation.md?cursor=WyIyMDI1LTEyLTA5VDE3OjU2OjA4LjkwNDAwMFoiLCJDVkUtMjAyNS02NDY4MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2022-23h2-edition-server-core-installation&cursor=WyIyMDI2LTAyLTEwVDE3OjUxOjE5LjUyNjAwMFoiLCJDVkUtMjAyNi0yMTI0OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2022-23h2-edition-server-core-installation/?cursor=WyIyMDI2LTAyLTEwVDE3OjUxOjE5LjUyNjAwMFoiLCJDVkUtMjAyNi0yMTI0OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.