CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:10 UTC )
What this means for you
This week: 5,382 CVEs published, 347 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,382 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2016 . Show all products
CVE Severity Title Published CVE-2026-85319 High 7.5 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85320 Medium 5.5 Windows Print Spooler Components Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85318 High 7.8 Servicing Stack Updates Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84018 High 7.0 Windows Print Spooler Components Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84017 High 7.5 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84016 High 7.8 Windows EAPHost Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84015 Critical 9.8 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84014 High 7.0 Windows Device Association Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84013 High 7.8 Windows Telephony Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84012 High 8.1 Windows Remote Desktop Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84007 Medium 6.5 Remote Desktop Gateway Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69886 Critical 9.8 Windows Imaging Component Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83929 High 8.8 Windows GDI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83932 High 7.8 Windows Group Policy Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83928 High 8.8 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83920 High 7.8 Windows Search Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83919 High 7.8 Microsoft Internet Messaging API Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83921 High 7.0 Windows Search Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83916 High 7.0 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83914 High 8.1 Microsoft XML Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85841 Medium 6.6 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83912 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83911 High 7.0 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70286 High 7.8 Windows Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70275 High 8.8 Windows CD-ROM File System Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70248 Medium 6.5 Windows Hyper-V Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70241 High 7.0 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83909 Medium 4.7 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70222 High 7.8 Windows Shell Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70089 High 8.8 Windows GDI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83896 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83879 High 7.0 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83867 High 7.8 Windows Push Notifications Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83866 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83876 High 7.8 Windows Shell Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83869 Critical 9.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83872 High 7.8 Windows TCP/IP Local Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83865 Medium 4.7 Windows Internet (wininet.dll) Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83864 Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83862 Critical 9.8 Windows Network Load Balancing Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83848 High 7.8 Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83847 High 7.8 Microsoft Account Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83843 High 7.5 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83842 High 7.0 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83838 High 8.0 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83834 High 7.0 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83836 High 7.8 Windows Event Tracing Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83833 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83827 High 7.0 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83798 Medium 5.5 Windows Update Stack Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 12 of 46 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.