Advisories · Technology
Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).
Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Remote Desktop Protocol Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
- CVSS 7.0 High
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 7.0 High
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 7.0 High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- CVSS 7.8 High
Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-1240
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 7.8 High
Azure Local Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Memory corruption
- CVSS 7.8 High
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Broken access control
- CVSS 7.8 High
Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Information disclosure
- CVSS 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 5.1 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CWE-20
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-841
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-841
- CVSS 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- CVSS 7.5 High
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 6.3 Medium
Virtual Secure Mode Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-324
- CVSS 7.5 High
Remote Procedure Call Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
- CVSS 2.1 Low
Windows Taskbar Live Preview Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 7.8 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 5.5 Medium
Microsoft Failover Cluster Information Disclosure Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Information disclosure
- CVSS 6.5 Medium
Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1287
- CVSS 6.2 Medium
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Information disclosure
- CVSS 6.5 Medium
Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-1287
- CVSS 7.8 High
Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 9.9 CriticalCritical · CVSS 9+
Microsoft Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Windows Push Notification Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
- CVSS 5.5 Medium
Windows Management Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.0 High
Windows Remote Desktop Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.7 High
Data Sharing Service Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- Race condition
- CVSS 7.8 High
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
- CVSS 7.0 High
Windows Graphics Component Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Information disclosure
- CVSS 6.5 Medium
NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- CVSS 7.8 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 4.7 Medium
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.8 High
Windows Speech Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
- CVSS 8.8 High
Windows Speech Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.4 High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.0 High
Windows Remote Desktop Protocol Security Feature Bypass
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Authentication bypass
- CVSS 7.8 High
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
- CWE-1310
- CVSS 5.5 Medium
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1023
- CVSS 5.5 Medium
Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
- CVSS 7.4 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 7.0 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption