CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 23:00 UTC )
What this means for you
This week: 4,561 CVEs published, 316 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,561 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product microsoft:windows_11_24h2 . Show all products
CVE Severity Title Published CVE-2026-42912 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42913 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42911 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42916 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42909 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42980 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42908 High 7.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42907 Medium 6.5 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42906 Medium 5.5 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42905 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42904 Critical 9.6 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42903 Medium 6.5 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42837 High 7.8 Windows Projected File System Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42836 High 7.0 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-50507 Medium 6.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-49160 High 7.5 HTTP.sys Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48574 High 7.8 Windows Media Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-47656 High 7.9 Windows Boot Manager Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42910 High 7.8 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45658 High 7.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45654 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45653 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45608 Medium 6.8 Windows DHCP Client Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45637 High 7.8 Microsoft DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45603 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45638 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45635 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45602 Critical 9.1 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45600 High 7.8 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45596 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45636 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45598 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45601 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45599 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45597 High 7.0 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45595 Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45604 Medium 5.5 Windows Managed Installer Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45594 Medium 5.5 Windows Application Identity (AppID) Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45593 High 7.8 Windows SDK Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45592 High 7.8 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45586 High 7.8 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42829 High 7.8 Windows Administrator Protection Secure Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42828 High 7.8 Windows Projected File System Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48583 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48578 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48576 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48575 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48573 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48570 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48568 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026
Previous Page 46 of 58 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.