Microsoft Windows Server 2022 23h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2022 23h2: 544 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2022_23h2
CVE-2025-47827
Medium · 4.6
KEV High · 58 Public exploit CWE-347 Jun 5, 2025
IGEL OS Use of a Key Past its Expiration Date Vulnerability
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
CVE-2025-32709
High · 7.8
KEV High · 59 Public exploit CWE-416 May 13, 2025
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706
High · 7.8
KEV High · 54 CWE-20 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30400
High · 7.8
KEV High · 59 Public exploit CWE-416 May 13, 2025
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-32701
High · 7.8
KEV High · 52 CWE-416 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30397
High · 7.5
KEV Urgent · 70 Public exploit CWE-843 May 13, 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-29824
High · 7.8
KEV Urgent · 71 Public exploit Ransomware CWE-416 Apr 8, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-26633
High · 7.0
KEV Urgent · 80 Public exploit Ransomware CWE-707 Mar 11, 2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24991
Medium · 5.5
KEV High · 50 CWE-125 Mar 11, 2025
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24993
High · 7.8
KEV High · 53 CWE-122 Mar 11, 2025
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24984
Medium · 4.6
KEV High · 50 CWE-532 Mar 11, 2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985
High · 7.8
KEV High · 61 Public exploit CWE-122 Mar 11, 2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24054
Medium · 5.4
KEV High · 67 Public exploit CWE-73 Mar 11, 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21418
High · 7.8
KEV High · 52 CWE-122 Feb 11, 2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21391
High · 7.1
KEV High · 53 CWE-59 Feb 11, 2025
Microsoft Windows Storage Link Following Vulnerability
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21333
High · 7.8
KEV High · 69 Public exploit CWE-122 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334
High · 7.8
KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335
High · 7.8
KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2024-49138
High · 7.8
KEV Urgent · 70 Public exploit CWE-122 Dec 11, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49039
High · 8.8
KEV Urgent · 71 Public exploit Ransomware CWE-287 Nov 12, 2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451
Medium · 6.5
KEV High · 59 Public exploit CWE-73 Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43572
High · 7.8
KEV High · 56 CWE-707 Oct 8, 2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573
High · 8.1
KEV High · 56 CWE-79 Oct 8, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43461
High · 8.8
KEV High · 56 CWE-451 Sep 10, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38217
Medium · 5.4
KEV High · 52 CWE-693 Sep 10, 2024
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability