CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 23:10 UTC )
What this means for you
This week: 4,853 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,853 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_11_24h2 . Show all products
CVE Severity Title Published CVE-2026-88146 High 7.0 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69923 High 7.8 Windows AI Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69940 Medium 6.5 Windows Client for NFS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69949 High 7.8 Windows Client for NFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69955 Medium 6.5 Windows Client for NFS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69977 High 7.0 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70113 High 7.8 Windows Client for NFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70008 High 7.8 Windows IP Over USB Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70024 Critical 9.8 Windows Internet Information Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70011 Medium 5.5 Windows IP Over USB Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70038 High 8.1 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70031 High 7.5 Windows iSCSI Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70013 High 8.1 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70045 High 7.0 Windows Work Folders Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70137 Medium 5.5 Windows Remote Access Connection Manager Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70134 High 7.0 Windows Event Tracing Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70102 High 7.8 Windows Spaceport.sys Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70044 Medium 5.5 Microsoft Windows Media Foundation Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70131 High 7.8 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70068 High 8.8 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70110 High 7.8 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70092 High 7.8 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70109 High 7.8 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70147 Critical 9.8 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70116 Medium 4.2 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70149 High 8.8 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96215 High 7.0 Windows Autopilot Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96216 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96217 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96218 Medium 5.5 Windows Update Stack Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96219 Critical 9.8 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96220 High 7.8 Windows Assigned Access Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96223 High 7.8 Windows Hyper-V Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96244 High 7.8 Windows Internal System User Profile Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96245 High 7.5 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96246 High 7.5 Network Policy Server (NPS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96247 Medium 5.5 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96302 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96305 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96306 High 7.8 Windows Sysmain Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96311 Medium 5.5 Windows Network List Service Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96307 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96308 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96309 High 7.8 Windows Subsystem for Linux Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96314 Medium 5.5 Windows Audio Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96312 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96313 High 7.0 Windows Push Notifications Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96315 Medium 5.5 Windows Overlay Filter Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96316 Medium 5.5 Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96317 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 48 of 58 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.