CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 23:00 UTC )
What this means for you
This week: 4,561 CVEs published, 316 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,561 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product microsoft:windows_11_26h1 . Show all products
CVE Severity Title Published CVE-2026-42825 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-32170 Medium 6.7 Windows Rich Text Edit Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-32161 High 7.5 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-41096 Critical 9.8 Windows DNS Client Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-41088 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40415 High 8.1 Windows TCP/IP Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40414 High 7.4 Windows TCP/IP Denial of Service Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40410 High 7.0 Windows SMB Client Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40408 High 7.8 Windows WAN ARP Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40407 High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40406 High 7.5 Windows TCP/IP Information Disclosure Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40405 High 7.5 Windows TCP/IP Denial of Service Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40399 High 7.8 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40380 Medium 6.2 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-40377 High 7.8 Microsoft Cryptographic Services Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35424 High 7.5 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35423 Medium 5.4 Windows 11 Telnet Client Information Disclosure Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35422 Medium 6.5 Windows TCP/IP Driver Security Feature Bypass Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35421 High 7.8 Windows GDI Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35419 Medium 5.5 Windows DWM Core Library Information Disclosure Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35418 High 7.8 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35417 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35416 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-35415 High 7.8 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34351 High 7.8 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34347 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34345 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34344 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34343 High 7.8 Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34342 High 7.0 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34333 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34331 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34330 High 7.8 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-34329 High 8.8 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-33841 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-33840 High 7.8 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-33839 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-33834 High 7.8 Windows Event Logging Service Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-21530 Medium 6.7 Windows Rich Text Edit Elevation of Privilege Vulnerability Assigned by microsoft
May 12, 2026 CVE-2026-32214 Medium 5.5 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33829 Medium 4.3 Windows Snipping Tool Spoofing Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33824 Known exploited
Critical 9.8 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33827 High 8.1 Windows TCP/IP Remote Code Execution Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33104 High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33101 High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33100 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32225 High 8.8 Windows Shell Security Feature Bypass Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32164 High 7.8 Windows User Interface Core Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32163 High 7.8 Windows User Interface Core Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32162 High 8.4 Windows COM Elevation of Privilege Vulnerability Assigned by microsoft
Apr 14, 2026
Previous Page 48 of 51 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.