CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 11:40 UTC )
What this means for you
This week: 5,205 CVEs published, 331 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,205 Show in the list Critical, last 7 days 331 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_11_24h2 . Show all products
CVE Severity Title Published CVE-2026-69708 High 7.0 Windows Web Platform Storage Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69785 High 7.8 Windows Smart Card Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69907 High 7.8 Windows Enterprise App Management Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69818 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69900 High 7.8 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69891 High 7.0 Windows Media Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69847 High 8.0 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69911 High 7.0 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69824 Critical 9.8 Microsoft Standard XPS Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69760 High 7.5 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69777 High 8.0 Windows DHCP Client Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69807 High 8.0 PowerShell Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69781 Medium 6.5 Windows DHCP Client Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69829 Critical 9.8 Windows Shell Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69769 Critical 9.8 Windows HTTP Print Provider Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69852 High 7.5 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69786 High 8.1 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69799 High 7.8 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69710 High 7.5 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69874 High 8.2 Windows ALPC Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69725 High 7.8 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69864 High 7.8 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69820 High 8.2 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69784 High 8.8 Windows Hello Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70565 High 7.0 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70574 High 7.8 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Assigned by microsoft
Sep 8, 2026 CVE-2026-70567 High 7.0 Windows Display Enhancement Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70568 High 7.0 Windows Defender Firewall Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70569 High 7.8 Windows Spaceport.sys Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70573 High 7.0 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70572 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70575 Medium 5.3 Windows Schannel Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70581 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70577 High 7.0 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70578 High 7.0 Windows Credential Guard Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70579 High 7.5 Windows Mobile Broadband Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70583 High 7.8 Windows Core Messaging Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71349 Medium 6.8 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71342 High 7.0 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71352 High 8.8 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72927 Medium 6.7 Winsock Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72931 Medium 4.7 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72936 High 8.1 Windows SMB Client Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72933 High 8.8 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72932 High 7.5 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72952 High 7.0 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72953 High 7.8 Windows USB Driver Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72941 High 7.8 Windows Biometric Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72942 Medium 6.5 Windows Spaceport.sys Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72950 High 8.8 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026
Previous Page 35 of 58 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.