CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 00:10 UTC )
What this means for you
This week: 4,849 CVEs published, 323 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,849 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-77890 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77886 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77888 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77505 High 8.1 Windows DNS Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77504 High 8.8 Microsoft Office Word Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77887 Medium 6.4 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77503 High 8.4 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77502 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77501 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77499 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77498 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77494 High 7.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77493 Critical 9.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77492 Medium 5.5 Windows Storage Port Driver Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77491 Medium 5.5 Windows GDI Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69579 Critical 9.8 Windows Message Queuing Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72986 High 8.8 Graphic Fonts Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72982 Critical 9.8 Windows Netlogon Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72983 Critical 9.8 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72981 High 8.1 IP Helper Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72979 Critical 9.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77495 High 8.8 Windows Imaging Component Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72978 Medium 5.9 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70283 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70124 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69930 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69929 Medium 5.9 Windows DHCP Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69603 High 8.8 Windows Hyper-V Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69604 High 7.8 Windows Audio Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69576 High 7.8 Graphic Fonts Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69548 Medium 4.6 Windows RNDIS Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69518 High 8.8 Windows Remote Desktop Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69394 High 7.0 Windows Audio Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-68887 High 7.5 Windows Message Queuing Queue Manager Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72948 Medium 6.7 Windows DNS Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72943 High 7.5 Windows Deployment Services Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72944 High 7.8 Role: Windows Fax Service Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72939 Medium 6.5 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72935 Medium 6.7 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-72930 High 7.0 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71351 High 7.0 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71345 High 7.8 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71353 High 7.0 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71341 Medium 5.5 Windows Partition Management Driver Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71343 High 7.8 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71348 Medium 6.8 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71350 Medium 6.8 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71339 Medium 6.7 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71338 Medium 6.4 Windows Failover Cluster Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71334 High 7.8 Windows NFS Portmapper Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026
Previous Page 19 of 33 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.