Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36047 CVE record

CVSS 7.8 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 14 Nov 2023
CVE-2023-36046 CVE record

CVSS 7.1 High

Windows Authentication Denial of Service Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Path traversal
Not analysed yet 14 Nov 2023
CVE-2023-36392 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 14 Nov 2023
CVE-2023-36393 CVE record

CVSS 7.8 High

Windows User Interface Application Core Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-426
Not analysed yet 14 Nov 2023
CVE-2023-36395 CVE record

CVSS 7.5 High

Windows Deployment Services Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36397 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Nov 2023
CVE-2023-36398 CVE record

CVSS 6.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36399 CVE record

CVSS 7.1 High

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2022
- Path traversal
Not analysed yet 14 Nov 2023
CVE-2023-36400 CVE record

CVSS 8.8 High

Windows HMAC Key Derivation Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36401 CVE record

CVSS 7.2 High

Microsoft Remote Registry Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36402 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36403 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 14 Nov 2023
CVE-2023-36404 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 14 Nov 2023
CVE-2023-36405 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 14 Nov 2023
CVE-2023-36406 CVE record

CVSS 5.5 Medium

Windows Hyper-V Information Disclosure Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-20
Not analysed yet 14 Nov 2023
CVE-2023-36407 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-20
Not analysed yet 14 Nov 2023
CVE-2023-36408 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36017 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36423 CVE record

CVSS 8.8 High

Microsoft Remote Registry Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36424 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36425 CVE record

CVSS 8.0 High

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36427 CVE record

CVSS 7.0 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Nov 2023
CVE-2023-36428 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36705 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 14 Nov 2023
CVE-2023-36719 CVE record

CVSS 7.8 High

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 14 Nov 2023
CVE-2023-24932 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows Server 2025 (Server Core installation)
- Microsoft Windows 11 Version 24H2
- Broken access control
Not analysed yet 9 May 2023
CVE-2022-30170 CVE record

CVSS 7.3 High

Windows Credential Roaming Service Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Sept 2022
CVE-2013-3900 CVE record

CVSS 5.5 MediumCritical · KEVKEV

WinVerifyTrust Signature Validation Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 11 Dec 2013