CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
What this means for you
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_10_21h2 . Show all products
CVE Severity Title Published CVE-2026-88128 High 7.8 Windows DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88135 High 7.8 WebDAV Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88113 High 7.0 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88126 High 7.8 WebDAV Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88134 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88127 High 7.0 Windows SMB Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88105 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88103 High 7.0 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87702 High 7.8 Windows Resource Management (MRM) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88072 High 7.8 Windows Host Guardian Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87715 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87700 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87704 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87698 Medium 5.5 Windows Remote Access Service Infrastructure Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87709 Medium 5.5 Windows Host Guardian Service Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87694 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87693 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87705 High 7.4 Windows Hyper-V Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88076 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87699 High 7.8 Winlogon Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85943 High 7.0 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85941 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69798 High 7.8 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69789 High 7.5 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85874 High 7.8 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83935 Critical 9.8 Microsoft XML Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83934 High 8.8 Windows GDI+ Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83933 Medium 5.5 Windows Update Orchestrator Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83925 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83924 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83923 High 8.8 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83918 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83915 High 7.0 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85912 High 7.0 Clipboard User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83913 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85911 High 7.8 Windows StateRepository API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85909 Medium 5.5 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83910 Critical 9.8 RPC Runtime Library Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85908 High 7.8 Windows Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83908 High 7.0 RPC Runtime Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83907 Medium 5.5 Windows Hello Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85906 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85905 High 8.8 Windows UI Immersive Server API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83905 Medium 4.7 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83904 Medium 5.5 HID Parser Library Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85903 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85902 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85901 High 7.8 Windows Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85872 High 7.8 Windows Storage VSP Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83899 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.