CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 23:30 UTC )
This week: 4,853 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,853 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product microsoft:windows_server_2025 . Show all products
CVE Severity Title Published CVE-2026-42974 High 8.1 Windows Performance Monitor Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42981 High 8.1 Windows Performance Monitor Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42984 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42973 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42970 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42971 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42969 Medium 5.5 Windows Push Notification Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42972 Medium 5.5 Windows Hyper-V Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42968 Medium 5.5 Windows Telephony Server Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42915 Medium 5.5 Microsoft Windows VMSwitch Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42914 Medium 5.3 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42912 High 7.0 Windows Telephony Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42913 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42911 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42916 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42909 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42980 High 7.8 NT OS Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42908 High 7.5 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42907 Medium 6.5 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42906 Medium 5.5 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42905 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42904 Critical 9.6 Windows TCP/IP Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42903 Medium 6.5 Windows Kerberos Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42837 High 7.8 Windows Projected File System Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42836 High 7.0 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-50507 Medium 6.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-49160 High 7.5 HTTP.sys Denial of Service Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-48574 High 7.8 Windows Media Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-47656 High 7.9 Windows Boot Manager Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-42910 High 7.8 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45658 High 7.8 Windows BitLocker Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45654 High 7.9 Secure Boot Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45653 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45608 Medium 6.8 Windows DHCP Client Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45637 High 7.8 Microsoft DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45603 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45638 High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45635 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45602 Critical 9.1 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45600 High 7.8 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45596 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45636 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45598 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45601 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45599 High 8.1 Windows UPnP Device Host Remote Code Execution Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45597 High 7.0 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45595 Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45604 Medium 5.5 Windows Managed Installer Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45594 Medium 5.5 Windows Application Identity (AppID) Information Disclosure Vulnerability Assigned by microsoft
Jun 9, 2026 CVE-2026-45593 High 7.8 Windows SDK Elevation of Privilege Vulnerability Assigned by microsoft
Jun 9, 2026
Previous Page 48 of 61 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
