CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 10:00 UTC )
This week: 4,590 CVEs published, 307 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,590 Show in the list Critical, last 7 days 307 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product microsoft:windows_11_24h2 . Show all products
2,885 CVEs, showing 2851 to 2885 Previous Page 58 of 58 CVE Severity Title Published CVE-2025-54105 High 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Sep 9, 2025 CVE-2025-53809 Medium 6.5 Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. Sep 9, 2025 CVE-2025-33073 Known exploited
High 8.8 Windows SMB Client Elevation of Privilege Vulnerability Assigned by microsoft
Jun 10, 2025 CVE-2025-33053 Known exploited
High 8.8 Internet Shortcut Files Remote Code Execution Vulnerability Assigned by microsoft
Jun 10, 2025 CVE-2025-47827 Known exploited
Medium 4.6 In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Assigned by mitre
Jun 5, 2025 CVE-2025-30397 Known exploited
High 7.5 Scripting Engine Memory Corruption Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32709 Known exploited
High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32706 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-32701 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-30400 Known exploited
High 7.8 Microsoft DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft
May 13, 2025 CVE-2025-29824 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Apr 8, 2025 CVE-2025-26633 Known exploited
High 7.0 Microsoft Management Console Security Feature Bypass Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24993 Known exploited
High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24991 Known exploited
Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24985 Known exploited
High 7.8 Windows Fast FAT File System Driver Remote Code Execution Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24984 Known exploited
Medium 4.6 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-24054 Known exploited
Medium 6.5 NTLM Hash Disclosure Spoofing Vulnerability Assigned by microsoft
Mar 11, 2025 CVE-2025-21418 Known exploited
High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Feb 11, 2025 CVE-2025-21391 Known exploited
High 7.1 Windows Storage Elevation of Privilege Vulnerability Assigned by microsoft
Feb 11, 2025 CVE-2025-21334 Known exploited
High 7.8 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Assigned by microsoft
Jan 14, 2025 CVE-2025-21333 Known exploited
High 7.8 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Assigned by microsoft
Jan 14, 2025 CVE-2025-21335 Known exploited
High 7.8 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Assigned by microsoft
Jan 14, 2025 CVE-2024-49138 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Dec 10, 2024 CVE-2024-49039 Known exploited
High 8.8 Windows Task Scheduler Elevation of Privilege Vulnerability Assigned by microsoft
Nov 12, 2024 CVE-2024-43451 Known exploited
Medium 6.5 NTLM Hash Disclosure Spoofing Vulnerability Assigned by microsoft
Nov 12, 2024 CVE-2024-43572 Known exploited
High 7.8 Microsoft Management Console Remote Code Execution Vulnerability Assigned by microsoft
Oct 8, 2024 CVE-2024-43573 Known exploited
Medium 6.5 Windows MSHTML Platform Spoofing Vulnerability Assigned by microsoft
Oct 8, 2024 CVE-2024-43461 Known exploited
High 8.8 Windows MSHTML Platform Spoofing Vulnerability Assigned by microsoft
Sep 10, 2024 CVE-2024-38217 Known exploited
Medium 5.4 Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft
Sep 10, 2024 CVE-2024-38014 Known exploited
High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Sep 10, 2024 CVE-2024-38107 Known exploited
High 7.8 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Assigned by microsoft
Aug 13, 2024 CVE-2024-38106 Known exploited
High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Aug 13, 2024 CVE-2024-38193 Known exploited
High 7.8 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Aug 13, 2024 CVE-2024-38178 Known exploited
High 7.5 Scripting Engine Memory Corruption Vulnerability Assigned by microsoft
Aug 13, 2024 CVE-2013-3900 Known exploited
Medium 5.5 WinVerifyTrust Signature Validation Vulnerability Assigned by microsoft
Dec 11, 2013
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
