Microsoft Windows Server 2022 23H2 vulnerabilities, page 2
1,676 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2022 23H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21216microsoftwindows_10_1607+23
EPSS score1.04%
Internet Connection Sharing (ICS) Denial of Service VulnerabilityCVE-2025-21414microsoftwindows_10_1507+25EPSS score0.61%
Windows Core Messaging Elevation of Privileges VulnerabilityCVE-2025-21204microsoftwindows_10_1507+34EPSS score7.00%
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.CVE-2025-21337microsoftwindows_10_1507+34EPSS score0.61%
Windows NTFS Elevation of Privilege VulnerabilityCVE-2025-21181microsoftwindows_10_1507+34EPSS score3.51%
Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-21406microsoftwindows_10_1507+34EPSS score1.83%
Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-21315microsoftwindows_11_24h2+5EPSS score0.65%
Microsoft Brokering File System Elevation of Privilege VulnerabilityCVE-2025-21226microsoftwindows_10_1507+34EPSS score0.88%
Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-21251microsoftwindows_10_1507+34EPSS score2.63%
Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-21309microsoftwindows_server_2012+12EPSS score15.06%
Windows Remote Desktop Services Remote Code Execution VulnerabilityCVE-2025-21350microsoftwindows_10_1507+34EPSS score2.15%
Windows Kerberos Denial of Service VulnerabilityCVE-2025-21299microsoftwindows_10_1507+25EPSS score2.23%
Windows Kerberos Security Feature Bypass VulnerabilityCVE-2025-21335microsoftwindows_10_21h2+14KEVEPSS score1.40%
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVE-2025-21272microsoftwindows_10_1507+34EPSS score0.71%
Windows COM Server Information Disclosure VulnerabilityCVE-2025-21191microsoftwindows_10_1507+34EPSS score0.32%
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.CVE-2025-21240microsoftwindows_10_1507+34EPSS score1.71%
Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-21341microsoftwindows_10_1507+34EPSS score0.71%
Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-21409microsoftwindows_10_1507+34EPSS score1.12%
Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-21347microsoftwindows_10_1507+29EPSS score0.66%
Windows Deployment Services Denial of Service VulnerabilityCVE-2025-21201microsoftwindows_10_1507+34EPSS score1.83%
Windows Telephony Server Remote Code Execution Vulnerability