Microsoft Windows Server 2022 vulnerabilities
4,918 published vulnerabilities in Microsoft Windows Server 2022, 109 of them exploited in the wild. The most were published in 2026 (2523), and 2523 so far in 2026.
Microsoft Windows Server 2022 vulnerabilities by year
2013
2021
2022
2023
2024
2025
2026
Most exploited Microsoft Windows Server 2022 vulnerabilities
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data
- CVE-2026-96951 Microsoft Windows Command Injection
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation
- CVE-2024-43461 Microsoft Windows MSHTML Platform Spoofing
- CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass
- CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.