CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:10 UTC )
What this means for you
This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,470 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-33104 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33827 High 8.1 Windows TCP/IP Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33829 Medium 4.3 Windows Snipping Tool Spoofing Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32214 Medium 5.5 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-34346 Medium 5.5 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-42975 High 8.0 Windows Bluetooth Port Driver Remote Code Execution Assigned by microsoft
Jul 14, 2026 CVE-2026-42990 Critical 9.8 SQL Server ODBC driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49164 High 8.1 Windows Active Directory Domain Services Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49177 Medium 5.5 Windows TCP/IP Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54983 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50695 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54989 High 7.0 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54987 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50697 High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54107 High 8.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-55004 High 7.8 Windows Print Configuration Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54992 High 8.4 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54982 High 8.8 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54119 High 7.5 Windows Active Directory Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54997 Medium 5.5 Windows SMB Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54999 High 8.8 Windows TCP/IP Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-55003 Medium 6.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54995 High 8.1 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-54122 High 8.4 Windows GDI+ Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56155 Known exploited
High 7.8 Active Directory Federation Services Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50694 High 8.1 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57097 Medium 6.4 Microsoft XML Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57976 Medium 6.5 Windows Active Directory Domain Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57979 Medium 6.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-58608 High 8.8 Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-58609 High 7.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-58614 Medium 5.5 Windows Kernel Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-58640 High 7.3 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-33842 Medium 5.5 Windows File Explorer Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-40400 High 8.0 Windows PowerShell Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-44806 Medium 5.3 Windows Secure Channel Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-40378 High 7.5 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-48564 High 8.8 DHCP Server Service Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49178 High 8.8 Windows Active Directory Domain Services Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49180 Medium 5.5 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49181 High 7.5 Windows DHCP Client Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49184 High 8.4 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49789 High 7.3 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49790 High 7.3 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49791 High 7.1 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49794 Medium 4.6 Windows USB Audio Class Driver Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49796 High 7.8 Windows GDI+ Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49797 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49798 Critical 9.3 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50299 Medium 6.8 Windows Storage Spaces Direct Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.