CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 22:20 UTC )
What this means for you
This week: 5,245 CVEs published, 345 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,245 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2022 . Show all products
CVE Severity Title Published CVE-2026-70106 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70096 Critical 9.8 Windows Rich Text Edit Control Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70093 High 7.8 Windows Rich Text Edit Control Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70103 High 7.8 Windows Error Reporting Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70095 High 7.5 Windows iSCSI Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70104 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70097 Medium 5.6 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70090 Medium 5.5 Windows Netlogon Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70087 Medium 5.5 Role: DNS Server Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70083 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70085 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70082 High 7.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70079 High 7.5 Windows DNS Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70077 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70064 High 7.8 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70062 High 8.1 Windows libarchive Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70063 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70060 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70059 High 7.8 Windows OLE Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70058 High 7.5 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70057 Medium 5.5 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70056 High 7.0 Windows Update Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70033 High 7.5 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70027 High 7.8 Windows Subsystem for Linux Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70026 High 7.0 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70025 Medium 5.3 Windows Netlogon Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70021 High 7.0 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70017 Medium 5.5 Windows Secure Kernel Mode Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70015 High 7.8 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70014 High 7.5 Windows Cryptographic Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70010 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69979 Medium 5.5 Windows AppX Deployment Service Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69978 Medium 5.6 Microsoft Windows VMSwitch Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69976 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69974 Medium 4.7 Desktop Window Manager Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69973 Medium 6.5 Windows libarchive Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69969 Medium 4.7 Windows AppX Deployment Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69970 High 7.0 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69968 Medium 6.5 Windows libarchive Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69964 High 7.0 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69966 High 7.8 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69967 Medium 5.5 Windows Overlay Filter Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69963 High 7.8 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69959 High 7.8 Windows Overlay Filter Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69958 Medium 6.8 Windows Overlay Filter Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69957 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69954 Medium 5.5 Windows Overlay Filter Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69953 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69952 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69947 Medium 6.8 Windows Overlay Filter Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026
Previous Page 19 of 57 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.