[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXyyc13tE5U3aFrc629DAoR4ltYLgI42jxN-3aMknP9o":3,"g5a-family:microsoft\u002Fwindows_server_2022_23h2":495,"g5a-ex:microsoft\u002Fwindows_server_2022_23h2@*":496},{"success":4,"data":5},true,{"product":6,"versions":77,"topVulnerabilitiesByEpss":108,"kevVulnerabilities":168,"seoMetadata":473,"meta":492},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":76},"microsoft","windows_server_2022_23h2",30,1060,49,"2025-10-14",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1009",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1085",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1128",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1189",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1251",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1308",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1369",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1425",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1486",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1551",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1611",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1665",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1668",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1732",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1791",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1840",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1849",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1913",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.1916",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.2025",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.2092",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.521",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.531",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.584",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.643",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.709",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.763",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.830",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.887",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.25398.950","Windows Server 2022 23h2 by Microsoft is a technology product with 30 tracked versions and 1060 known security vulnerabilities including 49 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},[109,117,123,128,133,139,145,152,159,163],{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":116},"CVE-2023-50387","Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.","2024-02-14",7.5,"v3.1","High",0.99988,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"cvssVersion":114,"severity":115,"isKev":4,"epssScore":122},"CVE-2024-21412","Internet Shortcut Files Security Feature Bypass Vulnerability","2024-02-13",8.1,0.9941,{"cveId":124,"description":125,"publishedDate":126,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":4,"epssScore":127},"CVE-2024-29059",".NET Framework Information Disclosure Vulnerability","2024-03-23",0.98624,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":121,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":132},"CVE-2023-35628","Windows MSHTML Platform Remote Code Execution Vulnerability","2023-12-12",0.92817,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":138},"CVE-2024-26256","Libarchive Remote Code Execution Vulnerability","2024-04-09",7.8,0.87896,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":114,"severity":115,"isKev":4,"epssScore":144},"CVE-2025-33053","External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.","2025-06-10",8.8,0.87015,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":114,"severity":150,"isKev":4,"epssScore":151},"CVE-2024-43451","NTLM Hash Disclosure Spoofing Vulnerability","2024-11-12",6.5,"Medium",0.85434,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"cvssVersion":114,"severity":157,"isKev":17,"epssScore":158},"CVE-2024-38077","Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability","2024-07-09",9.8,"Critical",0.84232,{"cveId":160,"description":161,"publishedDate":155,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":4,"epssScore":162},"CVE-2024-38112","Windows MSHTML Platform Spoofing Vulnerability",0.84225,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":113,"cvssVersion":114,"severity":115,"isKev":17,"epssScore":167},"CVE-2024-49113","Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability","2024-12-12",0.83592,[169,178,185,192,198,204,212,215,222,228,234,240,246,254,258,264,271,277,284,290,298,305,309,316,321,324,332,337,343,346,353,359,365,371,377,384,391,397,402,407,412,414,420,429,436,443,449,452,458,464],{"cveId":170,"description":171,"publishedDate":172,"cvssScore":137,"severity":115,"isKev":4,"epssScore":173,"cisaVulnName":174,"cisaDateAdded":175,"cisaShortDescription":176,"cisaRequiredAction":177},"CVE-2023-36424","Windows Common Log File System Driver Elevation of Privilege Vulnerability","2023-11-14",0.12087,"Microsoft Windows Out-of-Bounds Read Vulnerability","2026-04-13","Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":179,"description":180,"publishedDate":12,"cvssScore":156,"severity":157,"isKev":4,"epssScore":181,"cisaVulnName":182,"cisaDateAdded":183,"cisaShortDescription":184,"cisaRequiredAction":177},"CVE-2025-59287","Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.",0.9998,"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","2025-10-24","Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.",{"cveId":186,"description":187,"publishedDate":142,"cvssScore":143,"severity":115,"isKev":4,"epssScore":188,"cisaVulnName":189,"cisaDateAdded":190,"cisaShortDescription":191,"cisaRequiredAction":177},"CVE-2025-33073","Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.",0.82699,"Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.",{"cveId":193,"description":194,"publishedDate":12,"cvssScore":137,"severity":115,"isKev":4,"epssScore":195,"cisaVulnName":196,"cisaDateAdded":12,"cisaShortDescription":197,"cisaRequiredAction":177},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"cveId":199,"description":200,"publishedDate":12,"cvssScore":137,"severity":115,"isKev":4,"epssScore":201,"cisaVulnName":202,"cisaDateAdded":12,"cisaShortDescription":203,"cisaRequiredAction":177},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",0.06369,"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.",{"cveId":205,"description":206,"publishedDate":207,"cvssScore":208,"severity":150,"isKev":4,"epssScore":209,"cisaVulnName":210,"cisaDateAdded":12,"cisaShortDescription":211,"cisaRequiredAction":177},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,0.04927,"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"severity":115,"isKev":4,"epssScore":144,"cisaVulnName":213,"cisaDateAdded":142,"cisaShortDescription":214,"cisaRequiredAction":177},"Microsoft Windows External Control of File Name or Path Vulnerability","Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.",{"cveId":216,"description":217,"publishedDate":218,"cvssScore":113,"severity":115,"isKev":4,"epssScore":219,"cisaVulnName":220,"cisaDateAdded":218,"cisaShortDescription":221,"cisaRequiredAction":177},"CVE-2025-30397","Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.","2025-05-13",0.27044,"Microsoft Windows Scripting Engine Type Confusion Vulnerability","Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.",{"cveId":223,"description":224,"publishedDate":218,"cvssScore":137,"severity":115,"isKev":4,"epssScore":225,"cisaVulnName":226,"cisaDateAdded":218,"cisaShortDescription":227,"cisaRequiredAction":177},"CVE-2025-32709","Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",0.01818,"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.",{"cveId":229,"description":230,"publishedDate":218,"cvssScore":137,"severity":115,"isKev":4,"epssScore":231,"cisaVulnName":232,"cisaDateAdded":218,"cisaShortDescription":233,"cisaRequiredAction":177},"CVE-2025-32706","Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.02333,"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":235,"description":236,"publishedDate":218,"cvssScore":137,"severity":115,"isKev":4,"epssScore":237,"cisaVulnName":238,"cisaDateAdded":218,"cisaShortDescription":239,"cisaRequiredAction":177},"CVE-2025-32701","Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.01416,"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":241,"description":242,"publishedDate":218,"cvssScore":137,"severity":115,"isKev":4,"epssScore":243,"cisaVulnName":244,"cisaDateAdded":218,"cisaShortDescription":245,"cisaRequiredAction":177},"CVE-2025-30400","Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.",0.01917,"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":247,"description":248,"publishedDate":249,"cvssScore":149,"severity":150,"isKev":4,"epssScore":250,"cisaVulnName":251,"cisaDateAdded":252,"cisaShortDescription":253,"cisaRequiredAction":177},"CVE-2025-24054","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11",0.6227,"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.",{"cveId":255,"description":236,"publishedDate":256,"cvssScore":137,"severity":115,"isKev":4,"epssScore":257,"cisaVulnName":238,"cisaDateAdded":256,"cisaShortDescription":239,"cisaRequiredAction":177},"CVE-2025-29824","2025-04-08",0.13904,{"cveId":259,"description":260,"publishedDate":249,"cvssScore":137,"severity":115,"isKev":4,"epssScore":261,"cisaVulnName":262,"cisaDateAdded":249,"cisaShortDescription":263,"cisaRequiredAction":177},"CVE-2025-24985","Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.",0.0389,"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":265,"description":266,"publishedDate":249,"cvssScore":267,"severity":115,"isKev":4,"epssScore":268,"cisaVulnName":269,"cisaDateAdded":249,"cisaShortDescription":270,"cisaRequiredAction":177},"CVE-2025-26633","Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.",7,0.30391,"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.",{"cveId":272,"description":273,"publishedDate":249,"cvssScore":137,"severity":115,"isKev":4,"epssScore":274,"cisaVulnName":275,"cisaDateAdded":249,"cisaShortDescription":276,"cisaRequiredAction":177},"CVE-2025-24993","Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.",0.02216,"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":278,"description":279,"publishedDate":249,"cvssScore":280,"severity":150,"isKev":4,"epssScore":281,"cisaVulnName":282,"cisaDateAdded":249,"cisaShortDescription":283,"cisaRequiredAction":177},"CVE-2025-24991","Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.",5.5,0.02018,"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.",{"cveId":285,"description":286,"publishedDate":249,"cvssScore":208,"severity":150,"isKev":4,"epssScore":287,"cisaVulnName":288,"cisaDateAdded":249,"cisaShortDescription":289,"cisaRequiredAction":177},"CVE-2025-24984","Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.",0.01994,"Microsoft Windows NTFS Information Disclosure Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.",{"cveId":291,"description":292,"publishedDate":293,"cvssScore":137,"severity":115,"isKev":4,"epssScore":294,"cisaVulnName":295,"cisaDateAdded":293,"cisaShortDescription":296,"cisaRequiredAction":297},"CVE-2025-21418","Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","2025-02-11",0.01568,"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":299,"description":300,"publishedDate":293,"cvssScore":301,"severity":115,"isKev":4,"epssScore":302,"cisaVulnName":303,"cisaDateAdded":293,"cisaShortDescription":304,"cisaRequiredAction":297},"CVE-2025-21391","Windows Storage Elevation of Privilege Vulnerability",7.1,0.02303,"Microsoft Windows Storage Link Following Vulnerability","Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.",{"cveId":124,"description":125,"publishedDate":126,"cvssScore":113,"severity":115,"isKev":4,"epssScore":127,"cisaVulnName":306,"cisaDateAdded":307,"cisaShortDescription":308,"cisaRequiredAction":297},"Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.",{"cveId":310,"description":311,"publishedDate":312,"cvssScore":137,"severity":115,"isKev":4,"epssScore":313,"cisaVulnName":314,"cisaDateAdded":312,"cisaShortDescription":315,"cisaRequiredAction":297},"CVE-2025-21333","Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability","2025-01-14",0.09988,"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":317,"description":311,"publishedDate":312,"cvssScore":137,"severity":115,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":312,"cisaShortDescription":320,"cisaRequiredAction":297},"CVE-2025-21334",0.01561,"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":322,"description":311,"publishedDate":312,"cvssScore":137,"severity":115,"isKev":4,"epssScore":323,"cisaVulnName":319,"cisaDateAdded":312,"cisaShortDescription":320,"cisaRequiredAction":297},"CVE-2025-21335",0.0139,{"cveId":325,"description":326,"publishedDate":327,"cvssScore":137,"severity":115,"isKev":4,"epssScore":328,"cisaVulnName":329,"cisaDateAdded":330,"cisaShortDescription":331,"cisaRequiredAction":297},"CVE-2024-35250","Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","2024-06-11",0.25222,"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.",{"cveId":333,"description":171,"publishedDate":166,"cvssScore":137,"severity":115,"isKev":4,"epssScore":334,"cisaVulnName":232,"cisaDateAdded":335,"cisaShortDescription":336,"cisaRequiredAction":297},"CVE-2024-49138",0.26215,"2024-12-10","Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",{"cveId":338,"description":339,"publishedDate":148,"cvssScore":143,"severity":115,"isKev":4,"epssScore":340,"cisaVulnName":341,"cisaDateAdded":148,"cisaShortDescription":342,"cisaRequiredAction":297},"CVE-2024-49039","Windows Task Scheduler Elevation of Privilege Vulnerability",0.14179,"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.",{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"severity":150,"isKev":4,"epssScore":151,"cisaVulnName":344,"cisaDateAdded":148,"cisaShortDescription":345,"cisaRequiredAction":297},"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.",{"cveId":347,"description":348,"publishedDate":327,"cvssScore":267,"severity":115,"isKev":4,"epssScore":349,"cisaVulnName":350,"cisaDateAdded":351,"cisaShortDescription":352,"cisaRequiredAction":297},"CVE-2024-30088","Windows Kernel Elevation of Privilege Vulnerability",0.68202,"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","2024-10-15","Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ",{"cveId":354,"description":161,"publishedDate":355,"cvssScore":121,"severity":115,"isKev":4,"epssScore":356,"cisaVulnName":357,"cisaDateAdded":355,"cisaShortDescription":358,"cisaRequiredAction":297},"CVE-2024-43573","2024-10-08",0.46109,"Microsoft Windows MSHTML Platform Spoofing Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.",{"cveId":360,"description":361,"publishedDate":355,"cvssScore":137,"severity":115,"isKev":4,"epssScore":362,"cisaVulnName":363,"cisaDateAdded":355,"cisaShortDescription":364,"cisaRequiredAction":297},"CVE-2024-43572","Microsoft Management Console Remote Code Execution Vulnerability",0.66695,"Microsoft Windows Management Console Remote Code Execution Vulnerability","Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.",{"cveId":366,"description":161,"publishedDate":367,"cvssScore":143,"severity":115,"isKev":4,"epssScore":368,"cisaVulnName":357,"cisaDateAdded":369,"cisaShortDescription":370,"cisaRequiredAction":297},"CVE-2024-43461","2024-09-10",0.54486,"2024-09-16","Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.",{"cveId":372,"description":373,"publishedDate":367,"cvssScore":137,"severity":115,"isKev":4,"epssScore":374,"cisaVulnName":375,"cisaDateAdded":367,"cisaShortDescription":376,"cisaRequiredAction":297},"CVE-2024-38014","Windows Installer Elevation of Privilege Vulnerability",0.06263,"Microsoft Windows Installer Improper Privilege Management Vulnerability","Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":378,"description":379,"publishedDate":367,"cvssScore":380,"severity":150,"isKev":4,"epssScore":381,"cisaVulnName":382,"cisaDateAdded":367,"cisaShortDescription":383,"cisaRequiredAction":297},"CVE-2024-38217","Windows Mark of the Web Security Feature Bypass Vulnerability",5.4,0.10026,"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.",{"cveId":385,"description":386,"publishedDate":387,"cvssScore":137,"severity":115,"isKev":4,"epssScore":388,"cisaVulnName":389,"cisaDateAdded":387,"cisaShortDescription":390,"cisaRequiredAction":297},"CVE-2024-38107","Windows Power Dependency Coordinator Elevation of Privilege Vulnerability","2024-08-13",0.01635,"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.",{"cveId":392,"description":393,"publishedDate":387,"cvssScore":113,"severity":115,"isKev":4,"epssScore":394,"cisaVulnName":395,"cisaDateAdded":387,"cisaShortDescription":396,"cisaRequiredAction":297},"CVE-2024-38178","Scripting Engine Memory Corruption Vulnerability",0.4138,"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.",{"cveId":398,"description":348,"publishedDate":387,"cvssScore":267,"severity":115,"isKev":4,"epssScore":399,"cisaVulnName":400,"cisaDateAdded":387,"cisaShortDescription":401,"cisaRequiredAction":297},"CVE-2024-38106",0.06337,"Microsoft Windows Kernel Privilege Escalation Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.",{"cveId":403,"description":379,"publishedDate":387,"cvssScore":149,"severity":150,"isKev":4,"epssScore":404,"cisaVulnName":405,"cisaDateAdded":387,"cisaShortDescription":406,"cisaRequiredAction":297},"CVE-2024-38213",0.13626,"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.",{"cveId":408,"description":292,"publishedDate":387,"cvssScore":137,"severity":115,"isKev":4,"epssScore":409,"cisaVulnName":410,"cisaDateAdded":387,"cisaShortDescription":411,"cisaRequiredAction":297},"CVE-2024-38193",0.28739,"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":160,"description":161,"publishedDate":155,"cvssScore":113,"severity":115,"isKev":4,"epssScore":162,"cisaVulnName":357,"cisaDateAdded":155,"cisaShortDescription":413,"cisaRequiredAction":297},"Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.",{"cveId":415,"description":416,"publishedDate":155,"cvssScore":137,"severity":115,"isKev":4,"epssScore":417,"cisaVulnName":418,"cisaDateAdded":155,"cisaShortDescription":419,"cisaRequiredAction":297},"CVE-2024-38080","Windows Hyper-V Elevation of Privilege Vulnerability",0.07115,"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.",{"cveId":421,"description":422,"publishedDate":423,"cvssScore":137,"severity":115,"isKev":4,"epssScore":424,"cisaVulnName":425,"cisaDateAdded":426,"cisaShortDescription":427,"cisaRequiredAction":428},"CVE-2024-26169","Windows Error Reporting Service Elevation of Privilege Vulnerability","2024-03-12",0.03981,"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","2024-06-13","Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":430,"description":431,"publishedDate":432,"cvssScore":143,"severity":115,"isKev":4,"epssScore":433,"cisaVulnName":434,"cisaDateAdded":432,"cisaShortDescription":435,"cisaRequiredAction":297},"CVE-2024-30040","Windows MSHTML Platform Security Feature Bypass Vulnerability","2024-05-14",0.03939,"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":437,"description":438,"publishedDate":136,"cvssScore":143,"severity":115,"isKev":4,"epssScore":439,"cisaVulnName":440,"cisaDateAdded":441,"cisaShortDescription":442,"cisaRequiredAction":297},"CVE-2024-29988","SmartScreen Prompt Security Feature Bypass Vulnerability",0.44875,"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","2024-04-30","Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.",{"cveId":444,"description":348,"publishedDate":120,"cvssScore":137,"severity":115,"isKev":4,"epssScore":445,"cisaVulnName":446,"cisaDateAdded":447,"cisaShortDescription":448,"cisaRequiredAction":297},"CVE-2024-21338",0.5981,"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","2024-03-04","Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.",{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"severity":115,"isKev":4,"epssScore":122,"cisaVulnName":450,"cisaDateAdded":120,"cisaShortDescription":451,"cisaRequiredAction":297},"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":453,"description":454,"publishedDate":120,"cvssScore":455,"severity":115,"isKev":4,"epssScore":456,"cisaVulnName":405,"cisaDateAdded":120,"cisaShortDescription":457,"cisaRequiredAction":297},"CVE-2024-21351","Windows SmartScreen Security Feature Bypass Vulnerability",7.6,0.27798,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.",{"cveId":459,"description":460,"publishedDate":172,"cvssScore":137,"severity":115,"isKev":4,"epssScore":461,"cisaVulnName":462,"cisaDateAdded":172,"cisaShortDescription":463,"cisaRequiredAction":297},"CVE-2023-36033","Windows DWM Core Library Elevation of Privilege Vulnerability",0.10945,"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":465,"description":466,"publishedDate":467,"cvssScore":280,"severity":150,"isKev":4,"epssScore":468,"cisaVulnName":469,"cisaDateAdded":470,"cisaShortDescription":471,"cisaRequiredAction":472},"CVE-2013-3900","Why is Microsoft republishing a CVE from 2013?\nWe are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, except for clarifications about how to configure the EnableCertPaddingCheck registry value, the information herein remains unchanged from the original text published on December 10, 2013,\nMicrosoft does not plan to enforce the stricter verification behavior as a default functionality on supported releases of Microsoft Windows. This behavior remains available as an opt-in feature via reg key setting, and is available on supported editions of Windows released since December 10, 2013. This includes all currently supported versions of Windows 10 and Windows 11. The supporting code for this reg key was incorporated at the time of release for Windows 10 and Windows 11, so no security update is required; however, the reg key must be set. See the Security Updates table for the list of affected software.\nVulnerability Description\nA remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to leverage unverified portions of the file in such a way as to add malicious code to the file without invalidating the signature. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nIf a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.\nExploitation of this vulnerability requires that a user or application run or install a specially crafted, signed PE file. An attacker could modify an... See more at https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2013-3900","2013-12-11",0.44647,"Microsoft WinVerifyTrust function Remote Code Execution","2022-01-10","A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.","Apply updates per vendor instructions.",{"title":474,"metaDescription":475,"keywords":476,"structuredData":477},"Windows Server 2022 23h2 by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows Server 2022 23h2 by Microsoft covering 30 versions with 1060 tracked vulnerabilities including 1 critical and 41 high-severity issues and 49 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows Server 2022 23h2 vulnerabilities, Windows Server 2022 23h2 security, Windows Server 2022 23h2 CVE, Microsoft Windows Server 2022 23h2, Windows Server 2022 23h2 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows Server 2022 23h2 KEV, Windows Server 2022 23h2 exploited vulnerabilities",{"@context":478,"@type":479,"name":480,"description":475,"url":481,"manufacturer":482,"applicationCategory":486,"softwareVersion":487,"mainEntity":488},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows Server 2022 23h2","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_server_2022_23h2",{"@type":483,"name":484,"url":485},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","30 versions tracked",{"@type":489,"name":490,"description":491,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows Server 2022 23h2 Security Vulnerabilities","Security vulnerabilities affecting Windows Server 2022 23h2 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":493,"apiVersion":494},"2026-10-17T11:28:51.611Z","3.0",[],{"rows":497,"total":630,"capped":4,"failed":16},[498,503,508,513,518,522,526,530,535,539,543,547,551,556,561,565,569,573,577,581,586,590,594,599,603,607,612,617,622,626],{"cveId":170,"name":174,"severity":115,"cvss":137,"added":175,"epss":173,"published":499,"ranges":500,"checked":4,"hits":502,"covers":17},"2023-11-14T18:15:45.99",[501],"before 10.0.25398.531",[],{"cveId":179,"name":182,"severity":157,"cvss":156,"added":183,"epss":181,"published":504,"ranges":505,"checked":4,"hits":507,"covers":17},"2025-10-14T17:16:11.67",[506],"before 10.0.25398.1916",[],{"cveId":186,"name":189,"severity":115,"cvss":143,"added":190,"epss":188,"published":509,"ranges":510,"checked":4,"hits":512,"covers":17},"2025-06-10T17:23:02.967",[511],"before 10.0.25398.1665",[],{"cveId":193,"name":196,"severity":115,"cvss":137,"added":12,"epss":195,"published":514,"ranges":515,"checked":4,"hits":517,"covers":17},"2025-10-14T17:16:04.173",[516],"before 10.0.25398.1913",[],{"cveId":199,"name":202,"severity":115,"cvss":137,"added":12,"epss":201,"published":519,"ranges":520,"checked":4,"hits":521,"covers":17},"2025-10-14T17:15:39.193",[516],[],{"cveId":205,"name":210,"severity":150,"cvss":208,"added":12,"epss":209,"published":523,"ranges":524,"checked":4,"hits":525,"covers":17},"2025-06-05T14:15:32.263",[516],[],{"cveId":140,"name":213,"severity":115,"cvss":143,"added":142,"epss":144,"published":527,"ranges":528,"checked":4,"hits":529,"covers":17},"2025-06-10T17:22:18.853",[511],[],{"cveId":216,"name":220,"severity":115,"cvss":113,"added":218,"epss":219,"published":531,"ranges":532,"checked":4,"hits":534,"covers":17},"2025-05-13T17:16:02.37",[533],"before 10.0.25398.1611",[],{"cveId":223,"name":226,"severity":115,"cvss":137,"added":218,"epss":225,"published":536,"ranges":537,"checked":4,"hits":538,"covers":17},"2025-05-13T17:16:04.02",[533],[],{"cveId":229,"name":232,"severity":115,"cvss":137,"added":218,"epss":231,"published":540,"ranges":541,"checked":4,"hits":542,"covers":17},"2025-05-13T17:16:03.607",[533],[],{"cveId":235,"name":238,"severity":115,"cvss":137,"added":218,"epss":237,"published":544,"ranges":545,"checked":4,"hits":546,"covers":17},"2025-05-13T17:16:02.71",[533],[],{"cveId":241,"name":244,"severity":115,"cvss":137,"added":218,"epss":243,"published":548,"ranges":549,"checked":4,"hits":550,"covers":17},"2025-05-13T17:16:02.537",[533],[],{"cveId":247,"name":251,"severity":150,"cvss":149,"added":252,"epss":250,"published":552,"ranges":553,"checked":4,"hits":555,"covers":17},"2025-03-11T17:16:27.66",[554],"before 10.0.25398.1486",[],{"cveId":255,"name":238,"severity":115,"cvss":137,"added":256,"epss":257,"published":557,"ranges":558,"checked":4,"hits":560,"covers":17},"2025-04-08T18:16:08.34",[559],"before 10.0.25398.1551",[],{"cveId":259,"name":262,"severity":115,"cvss":137,"added":249,"epss":261,"published":562,"ranges":563,"checked":4,"hits":564,"covers":17},"2025-03-11T17:16:34.303",[554],[],{"cveId":265,"name":269,"severity":115,"cvss":267,"added":249,"epss":268,"published":566,"ranges":567,"checked":4,"hits":568,"covers":17},"2025-03-11T17:16:43.39",[554],[],{"cveId":272,"name":275,"severity":115,"cvss":137,"added":249,"epss":274,"published":570,"ranges":571,"checked":4,"hits":572,"covers":17},"2025-03-11T17:16:35.797",[554],[],{"cveId":278,"name":282,"severity":150,"cvss":280,"added":249,"epss":281,"published":574,"ranges":575,"checked":4,"hits":576,"covers":17},"2025-03-11T17:16:35.297",[554],[],{"cveId":285,"name":288,"severity":150,"cvss":208,"added":249,"epss":287,"published":578,"ranges":579,"checked":4,"hits":580,"covers":17},"2025-03-11T17:16:34.09",[554],[],{"cveId":291,"name":295,"severity":115,"cvss":137,"added":293,"epss":294,"published":582,"ranges":583,"checked":4,"hits":585,"covers":17},"2025-02-11T18:15:40.023",[584],"before 10.0.25398.1425",[],{"cveId":299,"name":303,"severity":115,"cvss":301,"added":293,"epss":302,"published":587,"ranges":588,"checked":4,"hits":589,"covers":17},"2025-02-11T18:15:37.723",[584],[],{"cveId":124,"name":306,"severity":115,"cvss":113,"added":307,"epss":127,"published":591,"ranges":592,"checked":4,"hits":593,"covers":17},"2024-03-23T00:15:09.15",[],[],{"cveId":310,"name":314,"severity":115,"cvss":137,"added":312,"epss":313,"published":595,"ranges":596,"checked":4,"hits":598,"covers":17},"2025-01-14T18:15:58.53",[597],"before 10.0.25398.1369",[],{"cveId":317,"name":319,"severity":115,"cvss":137,"added":312,"epss":318,"published":600,"ranges":601,"checked":4,"hits":602,"covers":17},"2025-01-14T18:15:58.77",[597],[],{"cveId":322,"name":319,"severity":115,"cvss":137,"added":312,"epss":323,"published":604,"ranges":605,"checked":4,"hits":606,"covers":17},"2025-01-14T18:15:58.96",[597],[],{"cveId":325,"name":329,"severity":115,"cvss":137,"added":330,"epss":328,"published":608,"ranges":609,"checked":4,"hits":611,"covers":17},"2024-06-11T17:16:02.65",[610],"before 10.0.25398.950",[],{"cveId":333,"name":232,"severity":115,"cvss":137,"added":335,"epss":334,"published":613,"ranges":614,"checked":4,"hits":616,"covers":17},"2024-12-12T02:04:40.307",[615],"before 10.0.25398.1308",[],{"cveId":338,"name":341,"severity":115,"cvss":143,"added":148,"epss":340,"published":618,"ranges":619,"checked":4,"hits":621,"covers":17},"2024-11-12T18:15:44.16",[620],"before 10.0.25398.1251",[],{"cveId":146,"name":344,"severity":150,"cvss":149,"added":148,"epss":151,"published":623,"ranges":624,"checked":4,"hits":625,"covers":17},"2024-11-12T18:15:22.483",[620],[],{"cveId":347,"name":350,"severity":115,"cvss":267,"added":351,"epss":349,"published":627,"ranges":628,"checked":4,"hits":629,"covers":17},"2024-06-11T17:15:56.81",[610],[],50]