Windows Server 2022 vulnerabilities
432 known vulnerabilities in Windows Server 2022 from Microsoft. 411 are rated high or critical, and 109 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 6.5 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Windows Scripting Engine Memory Corruption Exploited
Scripting Engine Memory Corruption Vulnerability
- 7.8 High severity
Microsoft Windows Power Dependency Coordinator Privilege Escalation Exploited
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel Privilege Escalation Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.3 High severity
Windows 10 Version 1809: Improper Access Control
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization
- 7.5 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.8 High severity
Microsoft Windows Hyper-V Privilege Escalation Exploited
Windows Hyper-V Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Exploited
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows Kernel TOCTOU Race Condition Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft DWM Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows MSHTML Platform Security Feature Bypass Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft SmartScreen Prompt Security Feature Bypass Exploited
SmartScreen Prompt Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Error Reporting Service Improper Privilege Management Exploited
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 7.5 High severity
Enterprise Linux: Allocation of Resources Without Limits or Throttling
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when ther
- 8.1 High severity
Microsoft Windows Internet Shortcut Files Security Feature Bypass Exploited
Internet Shortcut Files Security Feature Bypass Vulnerability
- 7.6 High severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Out-of-Bounds Read Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 9.8 Critical severity
curl: Out-of-bounds Write
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host nam
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 5.5 Medium severity
Microsoft WordPad Information Disclosure Exploited
Microsoft WordPad Information Disclosure Vulnerability
- 7.5 High severity
HTTP/2 Rapid Reset Attack Exploited
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- 7.5 High severity
curl: Allocation of Resources Without Limits or Throttling
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server
- 7.8 High severity
Microsoft Streaming Service Proxy Privilege Escalation Exploited
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- 7.5 High severity
Microsoft Windows Search Remote Code Execution Exploited
Windows Search Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Error Reporting Service Privilege Escalation Exploited
Windows Error Reporting Service Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Defender SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Windows MSHTML Platform Privilege Escalation Exploited
Windows MSHTML Platform Elevation of Privilege Vulnerability
- 8.4 High severity
Microsoft Streaming Service Untrusted Pointer Dereference Exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 7.0 High severity
Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- 4.4 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.8 High severity
TPM2.0: Out-of-bounds Write
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of s
- 7.8 High severity
Microsoft Windows Graphic Component Privilege Escalation Exploited
Windows Graphics Component Remote Code Execution Vulnerability
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8 High severity
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Exploited
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability