CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 08:23 UTC )
This week: 4,869 CVEs published, 345 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,869 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-49177 Medium 5.5 Windows TCP/IP Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-49164 High 8.1 Windows Active Directory Domain Services Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-42990 Critical 9.8 SQL Server ODBC driver Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-42975 High 8.0 Windows Bluetooth Port Driver Remote Code Execution Assigned by microsoft
Jul 14, 2026 CVE-2026-34346 Medium 5.5 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-44812 High 7.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-44803 High 7.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42987 High 8.1 Windows Deployment Services (WDS) Remote Code Execution Assigned by microsoft
Jun 9, 2026 CVE-2026-42985 High 8.8 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-44801 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-44815 Critical 9.8 DHCP Client Service Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-44799 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42989 High 7.8 Winlogon Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42986 High 7.8 Microsoft Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42970 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42972 Medium 5.5 Windows Hyper-V Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42968 Medium 5.5 Windows Telephony Server Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42914 Medium 5.3 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42912 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42911 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42916 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42909 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42980 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42908 High 7.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42905 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42903 Medium 6.5 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42836 High 7.0 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-50507 Medium 6.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48574 High 7.8 Windows Media Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-47656 High 7.9 Windows Boot Manager Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45658 High 7.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45653 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45608 Medium 6.8 Windows DHCP Client Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45603 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45638 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45635 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45602 Critical 9.1 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45596 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45636 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45598 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45601 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45599 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45595 Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45592 High 7.8 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45586 High 7.8 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-50508 Medium 6.5 Windows NTLM Spoofing Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48578 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48576 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48575 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48573 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026
Previous Page 29 of 33 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
