Skip to content

Known vulnerabilities in Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2025-64678 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Dec 9, 2025
CVE-2025-64661 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an… 7.8 High Dec 9, 2025
CVE-2025-62565 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally 7.3 High Dec 9, 2025
CVE-2025-62569 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally 7.0 High Dec 9, 2025
CVE-2025-62567 Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network 5.3 Medium Dec 9, 2025
CVE-2025-62474 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate… 7.8 High Dec 9, 2025
CVE-2025-62468 Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally 5.5 Medium Dec 9, 2025
CVE-2025-62467 Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges… 7.8 High Dec 9, 2025
CVE-2025-62465 Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally 6.5 Medium Dec 9, 2025
CVE-2025-55233 Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-62464 Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-62463 Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally 6.5 Medium Dec 9, 2025
CVE-2025-62462 Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-62461 Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges… 7.8 High Dec 9, 2025
CVE-2025-59517 Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-59516 Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate… 7.8 High Dec 9, 2025
CVE-2025-64673 Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-64670 Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker… 6.5 Medium Dec 9, 2025
CVE-2025-64658 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an… 7.5 High Dec 9, 2025
CVE-2025-62573 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally 7.0 High Dec 9, 2025
CVE-2025-62571 Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Dec 9, 2025
CVE-2025-62473 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Dec 9, 2025
CVE-2025-62549 Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Dec 9, 2025
CVE-2025-62472 Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate… 7.8 High Dec 9, 2025
CVE-2025-62470 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High Dec 9, 2025

Other Microsoft products