Advisories · Technology
Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).
Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 7.8 High
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.3 High
Windows File Explorer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 5.3 Medium
Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
- CVSS 5.5 Medium
Windows Defender Firewall Service Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 6.5 Medium
DirectX Graphics Kernel Denial of Service Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 6.5 Medium
DirectX Graphics Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 7.8 High
Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
- CVSS 7.8 High
Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- Authentication bypass
- CVSS 7.8 High
Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
- CVSS 6.5 Medium
Windows DirectX Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Information disclosure
- CVSS 7.5 High
Windows File Explorer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.0 High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 8.8 High
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.0 HighCritical · KEVKEV
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 5.5 Medium
Windows License Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 5.5 Medium
Windows License Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 6.3 Medium
DirectX Graphics Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.0 High
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.0 High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CVSS 7.0 High
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 6.5 Medium
Storvsp.sys Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Windows Hyper-V Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
- CVSS 7.8 High
Windows WLAN Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 5.5 Medium
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 5.5 Medium
Windows Speech Recognition Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CVSS 7.0 High
Windows Speech Recognition Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.0 High
Windows Speech Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.0 High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.8 High
Windows Smart Card Reader Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Insecure deserialization
- CVSS 7.0 High
Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Race condition
- CVSS 5.5 Medium
Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Information disclosure
- CVSS 5.5 Medium
Windows Search Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
- CVSS 6.5 Medium
NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- CVSS 5.5 Medium
Windows Push Notification Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 5.5 Medium
Windows State Repository API Server File Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 5.5 Medium
Windows ETL Channel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 7.0 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.8 High
Storport.sys Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
- CVSS 7.8 High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Microsoft Failover Cluster Information Disclosure Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Information disclosure
- CVSS 5.5 Medium
Storage Spaces Direct Information Disclosure Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Information disclosure
- CVSS 7.0 High
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1809
- Memory corruption