Known vulnerabilities in Windows Server 2022 20H2 - page 5

Vendor: Microsoft
Software: Windows Server
Version: 2022 20H2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 943
Public exploits: 37
Known exploited (KEV): 41
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2022 20H2 Windows Server 2022 20H2 is affected by 943 vulnerabilities: 21 critical, 185 high, 267 medium, 470 low Critical High Medium Low

Vulnerabilities (943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88393 - Improper Verification of Cryptographic Signature
CVE-2024-26194		 CWE-347 Low
No
No
 - 10.04.2024 SB2024041061
#VU88392 - Stack-based buffer overflow
CVE-2024-26180		 CWE-121 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88390 - Use After Free
CVE-2024-26241		 CWE-416 Low
No
No
 - 10.04.2024 SB2024041055
#VU88388 - Missing Authentication for Critical Function
CVE-2024-26235		 CWE-306 Low
No
No
 - 10.04.2024 SB2024041053
#VU88387 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-26236		 CWE-591 Low
No
No
 - 10.04.2024 SB2024041053
#VU88386 - Use of Uninitialized Resource
CVE-2024-26209		 CWE-908 Low
No
No
 - 10.04.2024 SB2024041052
#VU88385 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-21447		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041051
#VU88384 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-29056		 CWE-327 Low
No
No
 - 10.04.2024 SB2024041051
#VU88383 - Use After Free
CVE-2024-26230		 CWE-416 Low
Public exploit available
No
 - 10.04.2024 SB2024041048
#VU88382 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-26216		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041043
#VU88379 - Improper Access Control
CVE-2024-26234		 CWE-284 High
No
Exploited
 - 10.04.2024 SB2024041035
#VU88376 - Out-of-bounds read
CVE-2024-26243		 CWE-125 Low
No
No
 - 10.04.2024 SB2024041032
#VU88375 - Untrusted Pointer Dereference
CVE-2024-26254		 CWE-822 Medium
No
No
 - 10.04.2024 SB2024041030
#VU88371 - Incorrect Implementation of Authentication Algorithm
CVE-2024-26248		 CWE-303 Medium
No
No
 - 10.04.2024 SB2024041021
#VU88370 - NULL Pointer Dereference
CVE-2024-26183		 CWE-476 Medium
No
No
 - 10.04.2024 SB2024041021
#VU88364 - Heap-based Buffer Overflow
CVE-2024-26205		 CWE-122 High
No
No
 - 10.04.2024 SB2024041014
#VU88363 - Heap-based Buffer Overflow
CVE-2024-26179		 CWE-122 High
No
No
 - 10.04.2024 SB2024041014
#VU88362 - Heap-based Buffer Overflow
CVE-2024-26200		 CWE-122 High
No
No
 - 10.04.2024 SB2024041014
#VU88357 - Type confusion
CVE-2024-20678		 CWE-843 Medium
No
No
 - 10.04.2024 SB2024041010
#VU88350 - Out-of-bounds read
CVE-2024-26255		 CWE-125 Low
No
No
 - 10.04.2024 SB2024041009


Showing elements 81 - 100 out of 943