977 CVEs · 1 exploited · 1954 confirmed · 1954 findings filed under this action, at any date
Sources
Microsoft Security Response Center (Security Update Guide)vendor977 records, each linked below
Affected
Windows Server 2022
Windows Server 2022 (Server Core installation)
CVEs and records 977
The 20 most relevant of 977: exploited first, then importance, then CVSS. Severity is the source’s own; CVSS only where the record states it. Open a record for its evidence.
Windows Shell Security Feature Bypass Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Known exploited in the wild and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Shell Security Feature Bypass Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Known exploited in the wild and your pinned version is confirmed affected.
Microsoft QUIC Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft QUIC Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-96934Windows DHCP Server Remote Code Execution VulnerabilitySeverity criticalCVSS 9.8Published 2026-10-14↗
Windows DHCP Server Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows DHCP Server Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Microsoft QUIC Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft QUIC Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilitySeverity criticalCVSS 9.8Published 2026-10-14↗
Windows Text Shaping Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Text Shaping Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilitySeverity criticalCVSS 8.8Published 2026-10-14↗
Windows Text Shaping Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Text Shaping Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows Hyper-V Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Hyper-V Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilitySeverity criticalCVSS 8.8Published 2026-10-14↗
Windows Media Video Decoder Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Media Video Decoder Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows Hyper-V Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Hyper-V Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows DHCP Client Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows DHCP Client Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-96913Windows Kernel Elevation of Privilege VulnerabilitySeverity criticalCVSS 8.8Published 2026-10-14↗
Windows Kernel Elevation of Privilege Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Kernel Elevation of Privilege Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-96952Microsoft Windows Media Foundation Remote Code Execution VulnerabilitySeverity criticalCVSS 8.8Published 2026-10-14↗
Microsoft Windows Media Foundation Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft Windows Media Foundation Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows GDI+ Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows GDI+ Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Windows Remote Desktop Services Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows Remote Desktop Services Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
CVE-2026-88171Windows DHCP Server Remote Code Execution VulnerabilitySeverity criticalCVSS 8.1Published 2026-10-14↗
Windows DHCP Server Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.
Our recommended action, from the source’s facts: Apply Microsoft security update KB5126655.
Windows DHCP Server Remote Code Execution Vulnerability version confirmed affected
Microsoft lists affected product "Windows Server 2022 (Server Core installation)". Your pinned version 10.0.20348.5622 is within the affected range (fixed in build 10.0.20348.5761). Critical severity and your pinned version is confirmed affected.