Known vulnerabilities in Windows Server 2022 23H2 - page 7

Vendor: Microsoft
Version: 2022 23H2
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 267
Public exploits: 18
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2022 23H2 Windows Server 2022 23H2 is affected by 267 vulnerabilities: 3 critical, 54 high, 65 medium, 145 low Critical High Medium Low

Vulnerabilities (267)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87367 - Improper input validation
CVE-2024-26161
CWE-20 High
No
No
- 12.03.2024 SB20240312310
#VU87366 - Improper input validation
CVE-2024-21441
CWE-20 High
No
No
- 12.03.2024 SB20240312310
#VU87365 - Improper input validation
CVE-2024-21444
CWE-20 High
No
No
- 12.03.2024 SB20240312310
#VU87363 - Permissions, Privileges, and Access Controls
CVE-2024-21432
CWE-264 Low
No
No
- 12.03.2024 SB20240312309
#VU87362 - Improper input validation
CVE-2024-21407
CWE-20 High
No
No
- 12.03.2024 SB20240312308
#VU87361 - Improper input validation
CVE-2024-21408
CWE-20 Low
No
No
- 12.03.2024 SB20240312308
#VU87356 - Improper input validation
CVE-2024-26159
CWE-20 High
No
No
- 12.03.2024 SB20240312303
#VU87355 - Improper input validation
CVE-2024-26162
CWE-20 High
No
No
- 12.03.2024 SB20240312303
#VU87354 - Improper input validation
CVE-2024-21440
CWE-20 High
No
No
- 12.03.2024 SB20240312303
#VU87353 - Improper input validation
CVE-2024-21451
CWE-20 High
No
No
- 12.03.2024 SB20240312303
#VU87352 - Exposure of sensitive information to an unauthorized actor
CVE-2024-26160
CWE-200 Low
Public exploit available
No
- 12.03.2024 SB20240312302
#VU87351 - Improper input validation
CVE-2024-26197
CWE-20 Medium
No
No
- 12.03.2024 SB20240312300
#VU87350 - Permissions, Privileges, and Access Controls
CVE-2024-21442
CWE-264 Low
No
No
- 12.03.2024 SB20240312299
#VU87348 - Permissions, Privileges, and Access Controls
CVE-2024-21445
CWE-264 Low
No
No
- 12.03.2024 SB20240312299
#VU86481 - Improper input validation
CVE-2024-20684
CWE-20 Low
No
No
- 13.02.2024 SB2024021379
#VU86480 - Permissions, Privileges, and Access Controls
CVE-2024-21304
CWE-264 Low
No
No
- 13.02.2024 SB2024021378
#VU86479 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-21406
CWE-451 Medium
No
No
- 13.02.2024 SB2024021377
#VU86462 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-21371
CWE-362 Low
No
No
- 13.02.2024 SB2024021367
#VU86457 - Permissions, Privileges, and Access Controls
CVE-2024-21345
CWE-264 Low
Public exploit available
Exploited
- 13.02.2024 SB2024021367
#VU86377 - Resource exhaustion
CVE-2023-50387
CWE-400 Medium
Public exploit available
No
- 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more


Showing elements 121 - 140 out of 267