CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 20:10 UTC )
What this means for you
This week: 5,370 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,370 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2016 . Show all products
CVE Severity Title Published CVE-2026-50518 Critical 9.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50647 High 7.5 Active Directory Federation Server Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50655 High 7.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50661 Medium 6.1 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50666 High 8.8 Windows Remote Access Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50667 High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50668 Medium 6.8 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50669 High 7.0 Windows Telephony Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50673 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54115 High 7.8 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50684 Medium 4.8 Active Directory Federation Server Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50688 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50681 Medium 5.5 Windows Secure Channel Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54121 High 8.8 Active Directory Certificate Services Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50685 High 7.5 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50683 High 8.0 Windows DHCP Client Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50686 High 8.1 Windows OLE Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50690 Medium 5.5 Windows SMB Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50692 High 8.8 Desktop Window Manager Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54128 High 8.4 Windows DHCP Client Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54126 Medium 6.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56159 Critical 9.8 DHCP Server Service Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50359 High 7.0 Microsoft XML Core Services Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56176 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56175 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56182 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56190 Critical 9.8 Remote Desktop Protocol Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56186 High 8.1 Windows Secure Channel Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56188 Critical 9.8 Windows Server Network driver Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56189 High 7.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56643 High 7.8 DirectX Graphics Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56644 High 7.8 DirectX Graphics Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56194 High 8.8 Windows NFS Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56647 High 8.8 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56648 High 7.5 Windows NFS Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56649 Medium 5.9 Windows Network File System Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57083 Medium 5.5 Windows Media Photo Codec Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57084 Medium 5.5 Windows File Explorer Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56650 High 7.8 Windows Network File System Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57095 Medium 6.2 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57090 High 8.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57094 High 8.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57091 High 7.8 Windows File History Service Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57089 High 7.5 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57085 Medium 5.5 Windows Print Spooler Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57092 Critical 9.9 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57087 High 8.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57093 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57096 High 7.8 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57982 Medium 6.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026
Previous Page 16 of 46 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.