CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 10:50 UTC )
What this means for you
This week: 5,202 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,202 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2019 . Show all products
CVE Severity Title Published CVE-2026-72948 Medium 6.7 Windows DNS Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72962 High 8.2 Windows USB Video Driver Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72963 High 7.0 Windows Modern Execution Server Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-68837 High 7.0 Windows File History Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-68844 High 7.8 Windows Storage Spaces Controller Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-68877 High 7.8 Windows Storage Spaces Controller Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-68887 High 7.5 Windows Message Queuing Queue Manager Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69293 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69394 High 7.0 Windows Audio Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69443 High 7.5 Windows Device Health Attestation (DHA) Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69469 Medium 6.6 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69518 High 8.8 Windows Remote Desktop Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69548 Medium 4.6 Windows RNDIS Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69583 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69589 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69580 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69576 High 7.8 Graphic Fonts Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69604 High 7.8 Windows Audio Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69603 High 8.8 Windows Hyper-V Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69846 High 8.2 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69929 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69930 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70124 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70283 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72978 Medium 5.9 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77495 High 8.8 Windows Imaging Component Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72979 Critical 9.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72980 Medium 4.4 Windows Hello Security Feature Bypass Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72981 High 8.1 IP Helper Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72983 Critical 9.8 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72982 Critical 9.8 Windows Netlogon Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69476 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69787 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72986 High 8.8 Graphic Fonts Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69579 Critical 9.8 Windows Message Queuing Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77489 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77491 Medium 5.5 Windows GDI Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77492 Medium 5.5 Windows Storage Port Driver Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77493 Critical 9.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77494 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77498 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77500 High 7.8 Windows Device Association Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77499 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77501 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77502 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77503 High 8.4 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77887 Medium 6.4 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77504 High 8.8 Microsoft Office Word Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77505 High 8.1 Windows DNS Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77888 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026
Previous Page 28 of 55 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.