CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 10:50 UTC )
What this means for you
This week: 5,202 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,202 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2012 . Show all products
CVE Severity Title Published CVE-2026-102199 Medium 6.5 Microsoft Windows Codecs Library Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102203 High 8.8 RPC Runtime Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102206 Medium 6.8 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102205 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102208 High 7.0 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102216 High 7.8 Windows StateRepository API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102218 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102215 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102220 High 7.8 Windows VHD miniport driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102217 High 8.8 WebDAV Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102225 High 8.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-109453 High 7.0 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103553 High 7.8 Windows Partition Management Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103555 High 7.0 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103558 High 7.5 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103560 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103568 High 7.8 Windows Credential Providers Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103569 High 7.5 Windows IKE Extension Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103575 High 8.8 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105004 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105007 High 8.8 Windows NDIS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105008 Critical 9.0 Windows Schannel Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105009 High 7.5 Windows Server Update Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96113 Critical 9.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97805 Critical 9.8 Windows Partition Management Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97814 Critical 9.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97815 Critical 9.8 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97817 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97819 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97820 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97821 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97822 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97823 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97824 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97826 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97827 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97828 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97829 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97831 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97832 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97833 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97834 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97835 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97836 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97837 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97838 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97839 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97840 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97841 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97842 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 37 of 38 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.