Windows Server 2022 CVEs and Security Vulnerabilities

CVE-2023-36427

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 21h2 Windows 10 22h2 and 6 more

CVE-2023-36428

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more

CVE-2024-21320

Windows Themes Spoofing Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 22.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 9 more

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more

CVE-2024-30025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 4.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more

CVE-2024-30018

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 21h2 Windows 10 22h2 and 6 more

CVE-2024-30011

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2012 Windows Server 2016 Windows Server 2019 and 2 more

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 41.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 11 Windows 7 and 7 more

CVE-2022-38044

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 56.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 11 Windows 7 and 7 more

CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability

CVSS 3.1 · 4.7 Medium EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 11 Windows Server 2016 and 2 more

CVE-2024-29052

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 21h2 Windows 10 22h2 Windows 11 21h2 and 4 more

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 Windows 11 21h2 Windows Server 2022

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Windows 11 21h2 Windows Server and 1 more

CVE-2022-44689

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 11 Windows Server 2019 and 2 more

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 8 more

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44669

Windows Error Reporting Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 8 more

CVE-2022-41121

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Powershell Remote Desktop Client Windows 10 and 21 more

CVE-2022-41077

Windows Fax Compose Form Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

Search vulnerabilities

Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Windows Themes Spoofing Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Cryptographic Services Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Contacts Remote Code Execution Vulnerability

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Windows Defender Credential Guard Information Disclosure Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Fax Compose Form Elevation of Privilege Vulnerability