CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 23:10 UTC )
This week: 4,854 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,854 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_11_23h2 . Show all products
2,394 CVEs, showing 2351 to 2394 Previous Page 48 of 48 CVE Severity Title Published CVE-2026-97807 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97808 High 7.0 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97809 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97811 High 7.8 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97812 High 7.0 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97813 Medium 6.5 Windows Hyper-V Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97814 Critical 9.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97815 Critical 9.8 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97816 Critical 9.8 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97817 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97819 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97820 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97821 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97822 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97823 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97824 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97825 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97826 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97827 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97828 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97829 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97830 High 7.5 Windows Internet Information Services Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97831 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97832 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97833 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97834 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97835 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97836 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97837 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97838 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97839 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97840 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97841 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97842 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97843 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97844 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108127 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108128 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108129 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108131 High 7.5 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108132 High 7.0 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108135 High 7.0 Windows Backup Engine Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108136 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105016 Critical 9.8 Microsoft QUIC Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
