Windows Server 2022 23h2 vulnerabilities
195 known vulnerabilities in Windows Server 2022 23h2 from Microsoft. 185 are rated high or critical, and 59 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 5.4 Medium severity
Microsoft Windows NTLM Hash Disclosure Spoofing Exploited
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- 7.1 High severity
Microsoft Windows Storage Link Following Exploited
Windows Storage Elevation of Privilege Vulnerability
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Task Scheduler Privilege Escalation Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
- 6.5 Medium severity
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Exploited
NTLM Hash Disclosure Spoofing Vulnerability
- 8.1 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.8 High severity
Microsoft Windows Management Console Remote Code Execution Exploited
Microsoft Management Console Remote Code Execution Vulnerability
- 8.8 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Installer Improper Privilege Management Exploited
Windows Installer Elevation of Privilege Vulnerability
- 6.5 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Windows Scripting Engine Memory Corruption Exploited
Scripting Engine Memory Corruption Vulnerability
- 7.8 High severity
Microsoft Windows Power Dependency Coordinator Privilege Escalation Exploited
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel Privilege Escalation Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.3 High severity
Windows 10 Version 1809: Improper Access Control
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization
- 7.5 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V Privilege Escalation Exploited
Windows Hyper-V Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Exploited
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel TOCTOU Race Condition Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows MSHTML Platform Security Feature Bypass Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft SmartScreen Prompt Security Feature Bypass Exploited
SmartScreen Prompt Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Error Reporting Service Improper Privilege Management Exploited
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 7.5 High severity
Enterprise Linux: Allocation of Resources Without Limits or Throttling
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when ther
- 8.1 High severity
Microsoft Windows Internet Shortcut Files Security Feature Bypass Exploited
Internet Shortcut Files Security Feature Bypass Vulnerability
- 7.6 High severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Out-of-Bounds Read Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft WinVerifyTrust function Remote Code Execution Exploited
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo