CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:10 UTC )
What this means for you
This week: 5,382 CVEs published, 347 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,382 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2012 . Show all products
CVE Severity Title Published CVE-2026-69883 Critical 9.8 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69644 Medium 5.5 Windows iSCSI Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69634 Critical 9.8 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69705 Critical 9.8 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69521 High 8.8 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-68836 High 7.8 Windows kernel32.dll Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70284 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70278 High 7.8 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70272 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70271 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70252 High 7.0 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Assigned by microsoft
Oct 13, 2026 CVE-2026-70225 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70223 High 7.0 Windows Console Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70247 High 7.8 HTTP.sys Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70233 High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70205 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70195 Medium 4.7 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70245 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70168 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70156 High 7.0 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70177 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70150 High 7.0 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70173 Medium 5.5 Microsoft Windows Search Component Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70141 Medium 5.5 Microsoft Windows Search Component Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70133 High 7.5 Windows SMB Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70155 High 7.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70138 High 7.8 Windows OLE Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70166 Medium 6.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70132 High 7.8 Windows Portable Device File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70123 High 7.8 Microsoft Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70127 High 8.1 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70108 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70139 High 7.8 Windows Update Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70106 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70096 Critical 9.8 Windows Rich Text Edit Control Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70093 High 7.8 Windows Rich Text Edit Control Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70095 High 7.5 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70090 Medium 5.5 Windows Netlogon Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70087 Medium 5.5 Role: DNS Server Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70083 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70085 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70082 High 7.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70079 High 7.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70077 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70064 High 7.8 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70063 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70060 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70059 High 7.8 Windows OLE Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70058 High 7.5 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70057 Medium 5.5 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 12 of 38 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.