Product · Microsoft

Windows Server 2022

5,762 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

Critical 9.8

CVE-2026-105016 Public exploit

Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Ubuntu Alpine NuGet

Oct 13, 2026
Critical 9.8

CVE-2026-62878 Public exploit

Windows DNS Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Aug 11, 2026
Critical 9.8

CVE-2026-56190 Public exploit

Remote Desktop Protocol Remote Code Execution Vulnerability

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2026
Critical 9.8

CVE-2026-41089 Public exploit EPSS 78%

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

May 12, 2026
Critical 9.8

CVE-2026-33824 Exploited Public exploit EPSS 77%

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 14, 2026
KEV Aug 18, 2026
Critical 9.8

CVE-2025-59287 Exploited Public exploit Scanner template EPSS 100%

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Oct 14, 2025
KEV Oct 24, 2025
Critical 9.8

CVE-2025-47981 Public exploit EPSS 41%

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 8, 2025
Critical 9.8

CVE-2025-21298 Public exploit EPSS 74%

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 14, 2025
Critical 9.8

CVE-2024-49112 Public exploit EPSS 72%

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 10, 2024
Critical 9.0

CVE-2024-38124 Public exploit

Windows Netlogon Elevation of Privilege Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Oct 8, 2024
Critical 9.8

CVE-2024-38063 Public exploit EPSS 74%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024
Critical 9.8

CVE-2024-38077 Public exploit EPSS 84%

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jul 9, 2024
Critical 9.8

CVE-2023-21554 Public exploit EPSS 95%

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
Critical 9.8

CVE-2022-34718 Public exploit EPSS 57%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
Critical 9.8

CVE-2022-34715 Public exploit EPSS 80%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows

Aug 9, 2022
Critical 9.8

CVE-2022-26937 Public exploit EPSS 76%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

May 10, 2022
Critical 9.8

CVE-2022-26809 Public exploit EPSS 91%

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-24497 Public exploit EPSS 35%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-24491 Public exploit EPSS 33%

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Critical 9.8

CVE-2022-21907 Public exploit EPSS 93%

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022