What’s Vulnerable › Products

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) vulnerabilities

1676 known vulnerabilities, 59 confirmed exploited in the wild (CISA KEV), 749 published in the last 12 months.

Check whether your Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) version is affected

Exploited Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) vulnerabilities

• CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
• CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
• CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability
• CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability
• CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability
• CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability
• CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability
• CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30400 — Microsoft Windows DWM Core Library Use-After-Free Vulnerability
• CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion Vulnerability
• CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Latest Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) vulnerabilities

• CVE-2026-42825 — Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-41097 — Secure Boot Security Feature Bypass Vulnerability (CVSS 6.7)
• CVE-2026-41096 — Windows DNS Client Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-41095 — Data Deduplication Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-41089 — Windows Netlogon Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-41088 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40415 — Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-40414 — Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4)
• CVE-2026-40413 — Windows TCP/IP Denial of Service Vulnerability (CVSS 7.4)
• CVE-2026-40410 — Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-40408 — Windows WAN ARP Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40407 — Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40406 — Windows TCP/IP Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-40403 — Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-40401 — Windows TCP/IP Denial of Service Vulnerability (CVSS 7.1)
• CVE-2026-40399 — Windows TCP/IP Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40398 — Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40397 — Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40382 — Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-40380 — Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (CVSS 6.2)
• CVE-2026-40377 — Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-35424 — Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-35423 — Windows 11 Telnet Client Information Disclosure Vulnerability (CVSS 5.4)
• CVE-2026-35422 — Windows TCP/IP Driver Security Feature Bypass Vulnerability (CVSS 6.5)
• CVE-2026-35421 — Windows GDI Remote Code Execution Vulnerability (CVSS 7.8)