CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2019 . Show all products
CVE Severity Title Published CVE-2026-96850 Medium 5.5 Windows Modern Device Management (MDM) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96325 High 7.5 Windows SMB Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96324 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96322 High 7.0 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96320 Critical 9.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96300 Medium 5.9 RPC Endpoint Mapper Service Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96252 Critical 9.1 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96243 High 7.8 Windows WalletService Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96186 High 7.8 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70153 Critical 9.8 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69802 High 8.1 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88130 Medium 6.5 Role: DNS Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88129 Medium 6.5 Role: DNS Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88125 Medium 6.5 Role: DNS Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88123 Medium 6.5 Role: DNS Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88122 Medium 6.5 Role: DNS Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88120 High 8.1 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88119 High 8.1 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88117 High 8.1 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88116 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88114 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88112 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88093 High 7.8 Desktop Window Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70261 Medium 5.5 Microsoft Trace Data Helper Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70260 Medium 5.5 Microsoft Trace Data Helper Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70250 High 8.8 Windows DHCP Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70229 High 8.1 Windows Active Directory Domain Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70228 High 7.8 Desktop Window Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70111 High 8.1 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70160 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70158 High 8.8 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70148 Medium 6.5 Windows Broadcast DVR User Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70143 High 7.8 Windows Network File System Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70112 High 7.8 Windows Spaceport.sys Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70084 Medium 5.5 Windows Projected File System Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70054 High 7.8 Windows NetBIOS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69915 High 7.0 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69902 Medium 6.7 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69884 High 7.8 Windows GDI Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88193 High 7.8 Microsoft Scripting Engine Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88188 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88191 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88189 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88194 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88181 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88182 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88180 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88179 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88177 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88174 High 8.1 Windows Deployment Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
