microsoft / windows_server_2022
1,272 known vulnerabilities in microsoft windows_server_2022.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2021-42274 | Low | 0.7% | 6.8 | Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability | |
| CVE-2026-68819 | Low | 0.7% | 5.9 | Buffer over-read in Windows Network File System allows an unauthorized attacker … | |
| CVE-2026-20823 | Low | 0.7% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-20827 | Low | 0.7% | 5.5 | Exposure of sensitive information to an unauthorized actor in Tablet Windows Use… | |
| CVE-2026-20838 | Low | 0.7% | 5.5 | Generation of error message containing sensitive information in Windows Kernel a… | |
| CVE-2026-69415 | Low | 0.7% | 6.8 | Missing authentication for critical function in Windows DHCP Server allows an au… | |
| CVE-2022-38015 | Low | 0.7% | 6.5 | Windows Hyper-V Denial of Service Vulnerability | |
| CVE-2026-50485 | Low | 0.7% | 4.5 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny servic… | |
| CVE-2026-70091 | Low | 0.7% | 5.9 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-20828 | Low | 0.7% | 4.6 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauth… | |
| CVE-2026-65794 | Low | 0.7% | 6.5 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclo… | |
| CVE-2024-21377 | Low | 0.6% | 5.5 | Windows DNS Information Disclosure Vulnerability | |
| CVE-2026-20862 | Low | 0.6% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows Management… | |
| CVE-2026-69637 | Low | 0.6% | 5.7 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny … | |
| CVE-2026-69679 | Low | 0.6% | 5.7 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny … | |
| CVE-2023-36889 | Low | 0.6% | 5.5 | Windows Group Policy Security Feature Bypass Vulnerability | |
| CVE-2026-78446 | Low | 0.6% | 5.3 | Use after free in Windows Distributed File System (DFS) allows an authorized att… | |
| CVE-2026-68898 | Low | 0.6% | 6.5 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny serv… | |
| CVE-2026-69297 | Low | 0.6% | 6.5 | Storing passwords in a recoverable format in Windows DHCP Server allows an autho… | |
| CVE-2022-41055 | Low | 0.6% | 5.5 | Windows Human Interface Device Information Disclosure Vulnerability | |
| CVE-2023-36914 | Low | 0.6% | 5.5 | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerabil… | |
| CVE-2026-62750 | Low | 0.6% | 6.5 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized … | |
| CVE-2026-20829 | Low | 0.6% | 5.5 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose info… | |
| CVE-2026-69405 | Low | 0.6% | 5.7 | Missing release of memory after effective lifetime in Windows DHCP Server allows… | |
| CVE-2026-69416 | Low | 0.6% | 5.7 | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny se… | |
| CVE-2023-21694 | Low | 0.6% | 6.8 | Windows Fax Service Remote Code Execution Vulnerability | |
| CVE-2026-50426 | Low | 0.6% | 6.8 | Relative path traversal in DNS Server allows an authorized attacker to execute c… | |
| CVE-2024-21339 | Low | 0.6% | 6.4 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability | |
| CVE-2026-50659 | Low | 0.6% | 6.5 | Improper encoding or escaping of output in .NET allows an authorized attacker to… | |
| CVE-2026-57083 | Low | 0.5% | 5.5 | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unau… | |
| CVE-2026-57084 | Low | 0.5% | 5.5 | Use of uninitialized resource in Windows File Explorer allows an unauthorized at… | |
| CVE-2026-20825 | Low | 0.5% | 4.4 | Improper access control in Windows Hyper-V allows an authorized attacker to disc… | |
| CVE-2026-62814 | Low | 0.5% | 6.5 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthor… | |
| CVE-2026-62801 | Low | 0.5% | 6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') i… | |
| CVE-2026-58528 | Low | 0.5% | 6.8 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an un… | |
| CVE-2026-20939 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-50453 | Low | 0.5% | 6.1 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an un… | |
| CVE-2026-20937 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-49807 | Low | 0.5% | 6.2 | Exposure of sensitive information to an unauthorized actor in Windows DirectX al… | |
| CVE-2026-50294 | Low | 0.5% | 6.2 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-57097 | Low | 0.5% | 6.4 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass… | |
| CVE-2026-78516 | Low | 0.5% | 4.3 | Buffer over-read in Windows Storage allows an unauthorized attacker to disclose … | |
| CVE-2026-69406 | Low | 0.5% | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-57095 | Low | 0.5% | 6.2 | Exposure of sensitive information to an unauthorized actor in Windows Win32K all… | |
| CVE-2026-20839 | Low | 0.5% | 5.5 | Improper access control in Windows Client-Side Caching (CSC) Service allows an a… | |
| CVE-2026-61920 | Low | 0.5% | 6.6 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2024-21304 | Low | 0.5% | 4.1 | Trusted Compute Base Elevation of Privilege Vulnerability | |
| CVE-2026-20936 | Low | 0.5% | 4.3 | Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose inf… | |
| CVE-2026-50661 | Low | 0.5% | 6.1 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacke… | |
| CVE-2026-62715 | Low | 0.5% | 6.5 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthor… |