CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 11:00 UTC )
What this means for you
This week: 5,501 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,501 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-49799 Medium 6.5 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50308 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50311 High 7.8 Windows Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49804 Medium 6.6 Windows USB Video Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50294 Medium 6.2 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49801 Medium 5.5 Windows SMB Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49805 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49803 High 7.0 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50351 High 7.8 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50298 Medium 6.8 Windows Spaceport.sys Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50297 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50325 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50332 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50372 High 7.0 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50363 High 7.8 Windows Push Notifications Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50304 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50328 High 7.5 Windows Server Update Service (WSUS) Tampering Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50306 High 7.8 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50412 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50386 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50400 High 7.8 Windows App Package Installer Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50309 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50419 Low 3.3 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50368 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50313 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50380 Critical 9.6 Windows GDI+ Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50341 Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50370 High 8.8 DHCP Server Service Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50347 High 7.8 Windows Data.dll Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50321 High 7.8 Windows USB Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50324 Medium 5.9 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50312 Medium 4.7 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50330 High 7.5 Windows Remote Desktop Client Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50390 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50366 Medium 6.5 Windows Active Directory Domain Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50355 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50388 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50371 High 7.0 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50433 High 7.8 Windows Media Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50391 High 7.8 Windows Group Policy Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50346 High 7.8 Netlogon RPC Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50376 Medium 6.5 Windows Remote Desktop Client Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50397 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50405 High 7.8 Windows Filtering Platform Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50448 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50387 High 7.8 Windows GDI Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50334 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50445 Medium 6.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50344 High 7.8 Windows OLE Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50352 Medium 5.5 Windows Cryptographic Services Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.