Known vulnerabilities in Windows Server 2022 23H2 - page 5

Vendor: Microsoft
Software: Windows Server
Version: 2022 23H2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 267
Public exploits: 18
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2022 23H2 Windows Server 2022 23H2 is affected by 267 vulnerabilities: 3 critical, 54 high, 65 medium, 145 low Critical High Medium Low

Vulnerabilities (267)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88324 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-29066		 CWE-367 Low
No
No
 - 09.04.2024 SB2024040979
#VU88322 - Out-of-bounds read
CVE-2024-26226		 CWE-125 Medium
No
No
 - 09.04.2024 SB2024040979
#VU88318 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-26242		 CWE-362 Low
No
No
 - 09.04.2024 SB2024040978
#VU88317 - Heap-based Buffer Overflow
CVE-2024-26239		 CWE-122 Low
No
No
 - 09.04.2024 SB2024040978
#VU88316 - Protection Mechanism Failure
CVE-2024-29988		 CWE-693 High
Public exploit available
Exploited
 - 09.04.2024 SB2024040977
#VU88248 - Use After Free
CVE-2024-26223		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88247 - Use After Free
CVE-2024-26233		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88246 - Use After Free
CVE-2024-26231		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88245 - Use After Free
CVE-2024-26221		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88243 - Permissions, Privileges, and Access Controls
CVE-2024-20693		 CWE-264 Low
No
No
 - 09.04.2024 SB2024040959
#VU88242 - Permissions, Privileges, and Access Controls
CVE-2024-26218		 CWE-264 Low
No
No
 - 09.04.2024 SB2024040959
#VU88240 - Use After Free
CVE-2024-26222		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88239 - Use After Free
CVE-2024-26224		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88238 - Use After Free
CVE-2024-26227		 CWE-416 Medium
No
No
 - 09.04.2024 SB2024040960
#VU88237 - Resource exhaustion
CVE-2024-26219		 CWE-400 Medium
No
No
 - 09.04.2024 SB2024040958
#VU87473 - Security Features
CVE-2024-21431		 CWE-254 Low
No
No
 - 12.03.2024 SB20240312361
#VU87471 - Security Features
CVE-2024-21427		 CWE-254 Medium
No
No
 - 12.03.2024 SB20240312359
#VU87468 - Improper input validation
CVE-2024-21430		 CWE-20 Low
No
No
 - 12.03.2024 SB20240312355
#VU87467 - Improper input validation
CVE-2024-26190		 CWE-20 Medium
No
No
 - 12.03.2024 SB20240312354
#VU87457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28746		 CWE-200 Low
No
No
 - 12.03.2024 SB20240312343
SB20240312345
SB20240312357
and 51 more


Showing elements 81 - 100 out of 267