# Microsoft Windows Server 20h2


- [CVE-2021-31166](https://insights.sbomify.com/CVE-2021-31166/): Microsoft HTTP Protocol Stack Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-40444](https://insights.sbomify.com/CVE-2021-40444/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-33739](https://insights.sbomify.com/CVE-2021-33739/): Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2022-26925](https://insights.sbomify.com/CVE-2022-26925/): Microsoft Windows LSA Spoofing (high 8.1, exploited in the wild)
- [CVE-2022-34713](https://insights.sbomify.com/CVE-2022-34713/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-22047](https://insights.sbomify.com/CVE-2022-22047/): Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-30190](https://insights.sbomify.com/CVE-2022-30190/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-24521](https://insights.sbomify.com/CVE-2022-24521/): Microsoft Windows CLFS Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-21971](https://insights.sbomify.com/CVE-2022-21971/): Microsoft Windows Runtime Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-21999](https://insights.sbomify.com/CVE-2022-21999/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-22718](https://insights.sbomify.com/CVE-2022-22718/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-server-20h2/