CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:50 UTC )
What this means for you
This week: 5,380 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,380 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2025 . Show all products
CVE Severity Title Published CVE-2026-88106 High 7.0 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88102 Critical 9.8 Microsoft Failover Cluster Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88100 High 7.8 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88099 Medium 5.9 Windows Failover Cluster Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88098 High 7.0 Windows Security Support Provider Interface Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88073 High 8.8 Windows Graphics Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88071 High 7.8 Windows Hyper-V Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88070 High 7.8 Windows BitLocker Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87716 High 7.5 Windows Storage Spaces Controller Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87714 Medium 6.5 WebDAV Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87713 High 7.5 Windows Bluetooth Port Driver Remote Code Execution Assigned by microsoft
Oct 13, 2026 CVE-2026-87712 High 7.8 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87710 High 7.0 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87707 High 7.8 Windows Fax and Scan Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87706 High 7.8 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87691 High 7.8 Windows Management Services Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85945 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85939 Medium 5.3 Windows Kernel Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85936 High 8.8 Windows Shell Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85935 Medium 5.5 Windows USB Driver Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85934 High 7.0 Windows AppX Deployment Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85933 High 7.8 Windows Print Spooler Components Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85931 High 8.8 Windows Distributed File System (DFS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85930 High 7.0 Windows Image Acquisition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85928 Critical 9.8 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85926 High 8.1 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85916 Medium 6.2 Azure Active Directory Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85914 High 7.0 Windows Embedded Mode Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85904 High 7.0 Windows Device Association Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85867 High 7.8 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85329 High 7.0 Microsoft Account Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83888 Medium 6.5 Windows CD-ROM Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83710 High 7.0 Windows Device Association Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83674 High 8.1 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70303 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70277 Medium 5.5 Windows Fast FAT File System Driver Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70270 Medium 5.5 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70262 High 8.8 WebDAV Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70244 Medium 6.5 Windows DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70238 High 7.8 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70216 Medium 5.5 Windows Mobile Device Management Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70210 High 8.8 Windows OLE DB Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70187 High 8.1 Windows Remote Desktop Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70185 High 8.8 Microsoft PowerShell Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70172 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70170 Medium 6.5 Windows Kernel Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70167 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70164 High 7.0 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70052 High 7.8 Microsoft PowerShell Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70048 High 7.8 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 12 of 61 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.