CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_11_22h2 . Show all products
180 CVEs, showing 151 to 180 Previous Page 4 of 4 CVE Severity Title Published CVE-2024-21351 Known exploited
High 7.6 Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft
Feb 13, 2024 CVE-2024-21338 Known exploited
High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Feb 13, 2024 CVE-2023-36025 Known exploited
High 8.8 Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft
Nov 14, 2023 CVE-2023-36033 Known exploited
High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Nov 14, 2023 CVE-2023-36036 Known exploited
High 7.8 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Nov 14, 2023 CVE-2023-36424 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Nov 14, 2023 CVE-2023-36563 Known exploited
Medium 6.5 Microsoft WordPad Information Disclosure Vulnerability Assigned by microsoft
Oct 10, 2023 CVE-2023-36584 Known exploited
Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Oct 10, 2023 CVE-2023-44487 Known exploited
High 7.5 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. Assigned by mitre
Oct 10, 2023 CVE-2023-36802 Known exploited
High 7.8 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability Assigned by microsoft
Sep 12, 2023 CVE-2023-36884 Known exploited
High 7.5 Windows Search Remote Code Execution Vulnerability Assigned by microsoft
Jul 11, 2023 CVE-2023-36874 Known exploited
High 7.8 Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft
Jul 11, 2023 CVE-2023-32049 Known exploited
High 8.8 Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft
Jul 11, 2023 CVE-2023-32046 Known exploited
High 7.8 Windows MSHTML Platform Elevation of Privilege Vulnerability Assigned by microsoft
Jul 11, 2023 CVE-2023-29360 Known exploited
High 8.4 Microsoft Streaming Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 13, 2023 CVE-2023-28252 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Apr 11, 2023 CVE-2023-28229 Known exploited
High 7.0 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 11, 2023 CVE-2023-24880 Known exploited
Medium 4.4 Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft
Mar 14, 2023 CVE-2023-21823 Known exploited
High 7.8 Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft
Feb 14, 2023 CVE-2023-23376 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Feb 14, 2023 CVE-2023-21674 Known exploited
High 8.8 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Assigned by microsoft
Jan 10, 2023 CVE-2022-41128 Known exploited
High 8.8 Windows Scripting Languages Remote Code Execution Vulnerability Assigned by microsoft
Nov 9, 2022 CVE-2022-41125 Known exploited
High 7.8 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft
Nov 9, 2022 CVE-2022-41091 Known exploited
Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Nov 9, 2022 CVE-2022-41073 Known exploited
High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
Nov 9, 2022 CVE-2022-41049 Known exploited
Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Nov 9, 2022 CVE-2022-41033 Known exploited
High 7.8 Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 11, 2022 CVE-2022-38028 Known exploited
High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
Oct 11, 2022 CVE-2021-34527 Known exploited
High 8.8 Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft
Jul 2, 2021 CVE-2013-3900 Known exploited
Medium 5.5 WinVerifyTrust Signature Validation Vulnerability Assigned by microsoft
Dec 11, 2013
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
