CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
What this means for you
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2025 . Show all products
CVE Severity Title Published CVE-2026-105006 Medium 6.4 HID Class Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105004 High 7.8 Windows Overlay Filter Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105003 High 7.8 HID Class Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103577 High 7.5 Microsoft QUIC Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103576 Medium 6.5 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103575 High 8.8 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103569 High 7.5 Windows IKE Extension Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103568 High 7.8 Windows Credential Providers Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103560 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103558 High 7.5 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103555 High 7.0 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103553 High 7.8 Windows Partition Management Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-109453 High 7.0 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102225 High 8.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100215 High 7.8 Microsoft Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102217 High 8.8 WebDAV Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102214 High 8.8 Windows Hyper-V Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102220 High 7.8 Windows VHD miniport driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102221 Medium 4.4 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102215 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102218 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102216 High 7.8 Windows StateRepository API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102211 High 7.0 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102210 Critical 9.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102207 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102205 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102206 Medium 6.8 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102202 High 7.8 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102203 High 8.8 RPC Runtime Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102199 Medium 6.5 Microsoft Windows Codecs Library Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102198 Medium 5.3 Windows Remote Desktop Protocol Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102194 High 7.0 Windows Graphics Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102192 High 7.5 Windows Failover Cluster Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102191 High 7.0 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102189 High 7.0 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102188 Medium 6.8 Windows Storage Port Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102186 Medium 4.7 Windows Network File System Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102187 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96209 High 7.0 Windows Network File System Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88226 Medium 4.6 Windows Storage Port Driver Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70023 High 7.8 Windows Hyper-V Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100225 High 7.0 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100222 Critical 9.8 Network Policy Server (NPS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69506 Medium 4.7 Windows Key Storage Provider Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88219 High 8.8 RPC Runtime Library Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100220 High 8.8 Windows Media Video Decoder Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100219 Critical 9.8 Microsoft QUIC Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100218 High 8.1 Remote Desktop Gateway Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100217 High 7.8 Windows Group Policy Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-100216 High 7.0 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.