Skip to content

Known vulnerabilities in Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2025-27473 Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network 7.5 High Apr 8, 2025
CVE-2025-27471 Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to… 5.9 Medium Apr 8, 2025
CVE-2025-26688 Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-26687 Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network 7.5 High Apr 8, 2025
CVE-2025-26686 Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code… 7.5 High Apr 8, 2025
CVE-2025-26681 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally 6.7 Medium Apr 8, 2025
CVE-2025-26667 Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an… 6.5 Medium Apr 8, 2025
CVE-2025-26668 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 7.5 High Apr 8, 2025
CVE-2025-26669 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 8.8 High Apr 8, 2025
CVE-2025-26666 Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-26665 Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate… 7.0 High Apr 8, 2025
CVE-2025-26664 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Apr 8, 2025
CVE-2025-26663 Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code… 8.1 High Apr 8, 2025
CVE-2025-26645 Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Mar 11, 2025
CVE-2025-26633 Exploited Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability 7.0 High Mar 11, 2025
CVE-2025-24993 Exploited Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24992 Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally 5.5 Medium Mar 11, 2025
CVE-2025-24991 Exploited Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability 5.5 Medium Mar 11, 2025
CVE-2025-24985 Exploited Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24984 Exploited Microsoft Windows NTFS Information Disclosure Vulnerability 4.6 Medium Mar 11, 2025
CVE-2025-24084 Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally 8.4 High Mar 11, 2025
CVE-2025-24076 Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally 7.3 High Mar 11, 2025
CVE-2025-24072 Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges… 7.8 High Mar 11, 2025
CVE-2025-24071 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to… 6.5 Medium Mar 11, 2025
CVE-2025-24067 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally 7.8 High Mar 11, 2025

Other Microsoft products