Vulnerabilidades do Microsoft Windows Server 2022 23h2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Windows Server 2022 23h2: 544 registro(s), com versões afetadas e correções.cpe:2.3:o:microsoft:windows_server_2022_23h2
CVE-2025-47827
Média · 4.6
KEV Alta · 58 Exploit público CWE-347 05/06/2025
IGEL OS Use of a Key Past its Expiration Date Vulnerability
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
CVE-2025-32709
Alta · 7.8
KEV Alta · 59 Exploit público CWE-416 13/05/2025
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706
Alta · 7.8
KEV Alta · 53 CWE-20 13/05/2025
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30400
Alta · 7.8
KEV Alta · 59 Exploit público CWE-416 13/05/2025
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-32701
Alta · 7.8
KEV Alta · 52 CWE-416 13/05/2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30397
Alta · 7.5
KEV Urgente · 70 Exploit público CWE-843 13/05/2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-29824
Alta · 7.8
KEV Urgente · 71 Exploit público Ransomware CWE-416 08/04/2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-26633
Alta · 7.0
KEV Urgente · 80 Exploit público Ransomware CWE-707 11/03/2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24991
Média · 5.5
KEV Alta · 50 CWE-125 11/03/2025
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24993
Alta · 7.8
KEV Alta · 53 CWE-122 11/03/2025
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24984
Média · 4.6
KEV Alta · 50 CWE-532 11/03/2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985
Alta · 7.8
KEV Alta · 61 Exploit público CWE-122 11/03/2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24054
Média · 5.4
KEV Alta · 67 Exploit público CWE-73 11/03/2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21418
Alta · 7.8
KEV Alta · 52 CWE-122 11/02/2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21391
Alta · 7.1
KEV Alta · 53 CWE-59 11/02/2025
Microsoft Windows Storage Link Following Vulnerability
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21333
Alta · 7.8
KEV Alta · 69 Exploit público CWE-122 14/01/2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334
Alta · 7.8
KEV Alta · 52 CWE-416 14/01/2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335
Alta · 7.8
KEV Alta · 52 CWE-416 14/01/2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2024-49138
Alta · 7.8
KEV Urgente · 70 Exploit público CWE-122 11/12/2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49039
Alta · 8.8
KEV Urgente · 71 Exploit público Ransomware CWE-287 12/11/2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451
Média · 6.5
KEV Alta · 59 Exploit público CWE-73 12/11/2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43572
Alta · 7.8
KEV Alta · 56 CWE-707 08/10/2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573
Alta · 8.1
KEV Alta · 56 CWE-79 08/10/2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43461
Alta · 8.8
KEV Alta · 56 CWE-451 10/09/2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38217
Média · 5.4
KEV Alta · 52 CWE-693 10/09/2024
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability