CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:30 UTC )
What this means for you
This week: 5,508 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,508 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-62890 High 7.8 Windows GDI+ Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62893 Critical 9.8 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62908 High 7.0 Windows Backup Engine Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65662 Medium 5.5 Windows GDI Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65671 High 7.8 Remote Access API Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65784 Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65814 High 7.8 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-66799 High 7.8 Windows Key Guard Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-68819 Medium 5.9 Windows Network File System Denial of Service Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-68820 Known exploited
High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70307 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70304 Medium 6.7 Windows DNS Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70330 Medium 6.7 Windows DNS Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61352 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70344 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70345 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70346 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70347 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-42976 High 7.8 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-59122 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-59131 Medium 5.6 AMD Zen Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61349 High 7.8 Windows Work Folder Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61363 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61364 High 7.8 Windows Remote Desktop Services Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61365 High 7.8 Windows Remote Desktop Services Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61360 Medium 5.5 Windows GDI Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61920 Medium 6.6 Windows DNS Server Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61926 High 7.8 Windows USB Driver Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61918 Medium 6.5 Windows Remote Desktop Client Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-61921 Medium 6.5 Windows Remote Desktop Client Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62698 High 7.8 Microsoft Digest Authentication Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62700 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62701 High 7.8 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62709 Medium 5.5 Windows GDI+ Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62711 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62720 Medium 6.5 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62714 Medium 6.5 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62717 High 7.8 Windows Message Queuing Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62721 High 7.8 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62725 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62726 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62728 High 7.0 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62733 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62743 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62730 Medium 5.5 Windows Wired AutoConfig Service Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62732 High 7.8 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62734 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62757 Medium 5.3 Windows Schannel Security Feature Bypass Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62741 High 7.8 Windows HTTP.sys Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62752 High 7.8 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.