CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 10:10 UTC )
What this means for you
This week: 4,876 CVEs published, 345 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,876 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-26159 High 7.8 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26152 High 7.0 Microsoft Cryptographic Services Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32212 Medium 5.5 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33826 High 8.0 Windows Active Directory Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32217 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32202 Known exploited
Medium 4.3 Windows Shell Spoofing Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32183 High 7.8 Windows Snipping Tool Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32156 High 7.4 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32093 High 7.0 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32087 High 7.0 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32083 High 7.0 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32082 High 7.0 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32075 High 7.0 Windows UPnP Device Host Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32073 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27929 High 7.0 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27921 High 7.0 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27919 High 7.8 Windows UPnP Device Host Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27917 High 7.0 Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27915 High 7.8 Windows UPnP Device Host Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-27908 High 7.0 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26183 High 7.8 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26180 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26174 High 7.0 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26162 High 7.8 Windows OLE Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26160 High 7.8 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26154 High 7.5 Windows Server Update Service (WSUS) Tampering Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26151 High 7.1 Remote Desktop Spoofing Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-21525 Known exploited
Medium 6.2 Windows Remote Access Connection Manager Denial of Service Vulnerability Assigned by microsoft
Feb 10, 2026 CVE-2026-21510 Known exploited
High 8.8 Windows Shell Security Feature Bypass Vulnerability Assigned by microsoft
Feb 10, 2026 CVE-2026-21513 Known exploited
High 8.8 MSHTML Framework Security Feature Bypass Vulnerability Assigned by microsoft
Feb 10, 2026 CVE-2026-21533 Known exploited
High 7.8 Windows Remote Desktop Services Elevation of Privilege Vulnerability Assigned by microsoft
Feb 10, 2026 CVE-2026-20805 Known exploited
Medium 5.5 Desktop Window Manager Information Disclosure Vulnerability Assigned by microsoft
Jan 13, 2026 CVE-2025-59287 Known exploited
Critical 9.8 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 14, 2025 CVE-2025-59230 Known exploited
High 7.8 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 14, 2025 CVE-2025-24990 Known exploited
High 7.8 Windows Agere Modem Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 14, 2025 CVE-2025-33073 Known exploited
High 8.8 Windows SMB Client Elevation of Privilege Vulnerability Assigned by microsoft
Jun 10, 2025 CVE-2025-33053 Known exploited
High 8.8 Internet Shortcut Files Remote Code Execution Vulnerability Assigned by microsoft
Jun 10, 2025 CVE-2025-30397 Known exploited
High 7.5 Scripting Engine Memory Corruption Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32709 Known exploited
High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32706 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32701 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-29824 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Apr 8, 2025 CVE-2025-26633 Known exploited
High 7.0 Microsoft Management Console Security Feature Bypass Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24993 Known exploited
High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24991 Known exploited
Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24985 Known exploited
High 7.8 Windows Fast FAT File System Driver Remote Code Execution Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24984 Known exploited
Medium 4.6 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24983 Known exploited
High 7.0 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24054 Known exploited
Medium 6.5 NTLM Hash Disclosure Spoofing Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-21418 Known exploited
High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Feb 11, 2025
Previous Page 31 of 33 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.