What’s Vulnerable › Products

Microsoft Windows Server 2022 vulnerabilities

4958 known vulnerabilities, 109 confirmed exploited in the wild (CISA KEV), 2624 published in the last 12 months.

Check whether your Microsoft Windows Server 2022 version is affected

Exploited Microsoft Windows Server 2022 vulnerabilities

• CVE-2026-96951 — Windows Shell Security Feature Bypass Vulnerability
• CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
• CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
• CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability
• CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability
• CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability
• CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability
• CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability
• CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2021-43226 — Microsoft Windows Privilege Escalation Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Latest Microsoft Windows Server 2022 vulnerabilities

• CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97843 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97842 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97841 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97840 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97839 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97838 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97837 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97836 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97835 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97834 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97833 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97832 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97831 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97830 — Windows Internet Information Services Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-97829 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97828 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97827 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97826 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97825 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97824 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97823 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97822 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97821 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97820 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)