Skip to content

Known vulnerabilities in Microsoft Windows Server 2022

Is your version affected?

CVE Summary Score Published
CVE-2026-45588 Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally 7.9 High Jun 9, 2026
CVE-2026-41092 Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-47291 Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-47288 Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent… 7.1 High Jun 9, 2026
CVE-2026-47289 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Jun 9, 2026
CVE-2026-45656 Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally 7.8 High Jun 9, 2026
CVE-2026-45657 Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network 9.8 Critical Jun 9, 2026
CVE-2026-45655 Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a… 5.3 Medium Jun 9, 2026
CVE-2026-45648 Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a… 8.8 High Jun 9, 2026
CVE-2026-45642 Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an… 3.9 Low Jun 9, 2026
CVE-2026-45634 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally 5.5 Medium Jun 9, 2026
CVE-2026-45641 Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to… 8.4 High Jun 9, 2026
CVE-2026-45606 Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally 5.5 Medium Jun 9, 2026
CVE-2026-45607 Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally 8.4 High Jun 9, 2026
CVE-2026-45639 Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network 7.5 High Jun 9, 2026
CVE-2026-45640 Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally 7.0 High Jun 9, 2026
CVE-2026-45605 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-45487 Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized… 7.8 High Jun 9, 2026
CVE-2026-34335 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Jun 9, 2026
CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-33828 Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026
CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 7.8 High Jun 9, 2026
CVE-2026-41108 Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally 7.0 High Jun 9, 2026
CVE-2026-41097 Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security… 6.7 Medium May 12, 2026
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability 7.4 High May 12, 2026

Other Microsoft products