Microsoft

Windows Server 2022 23h2

1676 vulnerabilities found.

Please note: This list may be incomplete. Data is provided in its original format, subject to change.
6.7

CVE-2026-41097

Media report
  • EPSS 1.42%
  • Published 12.05.2026 16:59:30
  • Last modified 15.05.2026 15:36:23

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

7.4

CVE-2026-40413

Media report
  • EPSS 0.4%
  • Published 12.05.2026 16:59:27
  • Last modified 01.06.2026 19:16:38

Windows TCP/IP Denial of Service Vulnerability

8.8

CVE-2026-40403

Media report
  • EPSS 0.43%
  • Published 12.05.2026 16:59:26
  • Last modified 15.05.2026 15:22:44

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

7.1

CVE-2026-40401

Media report
  • EPSS 0.33%
  • Published 12.05.2026 16:59:25
  • Last modified 01.06.2026 19:16:36

Windows TCP/IP Denial of Service Vulnerability

7.8

CVE-2026-40398

Media report
  • EPSS 2.42%
  • Published 12.05.2026 16:59:24
  • Last modified 15.05.2026 15:27:39

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

4.4

CVE-2026-32209

Media report
  • EPSS 0.2%
  • Published 12.05.2026 16:59:23
  • Last modified 14.05.2026 14:51:45

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

7.8

CVE-2026-40397

Media report
  • EPSS 0.27%
  • Published 12.05.2026 16:59:23
  • Last modified 01.06.2026 19:16:36

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-40382

Media report
  • EPSS 0.25%
  • Published 12.05.2026 16:59:22
  • Last modified 15.05.2026 15:32:24

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

7

CVE-2026-34340

Media report
  • EPSS 0.21%
  • Published 12.05.2026 16:59:15
  • Last modified 14.05.2026 15:12:46

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

7

CVE-2026-34341

Media report
  • EPSS 0.2%
  • Published 12.05.2026 16:59:15
  • Last modified 14.05.2026 15:00:43

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.