CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 11:20 UTC )
What this means for you
This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,500 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2012_r2 . Show all products
CVE Severity Title Published CVE-2026-83573 Medium 6.8 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83570 High 7.8 Windows Search Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83567 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83564 High 7.0 Windows Search Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83522 High 8.1 Windows IKE Extension Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83519 Critical 9.8 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83517 Critical 9.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83513 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83514 High 7.8 Windows Partition Management Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83511 High 7.4 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83509 High 7.0 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83508 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83506 High 7.8 Servicing Stack Updates Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-81971 High 7.0 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69326 High 8.8 Graphic Fonts Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-77496 High 8.8 Windows Imaging Component Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-73027 High 7.8 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69635 Medium 6.6 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-78459 High 7.8 Microsoft Internet Information Services Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69471 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69640 Medium 5.3 Windows Key Distribution Center Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69736 High 7.0 Windows Credential Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70295 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70294 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70293 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70292 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70288 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70258 High 8.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70237 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70236 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70232 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70209 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70208 Medium 5.5 HTTP.sys Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70201 Medium 5.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70211 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70199 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70157 Critical 9.8 Windows System Information Console Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70207 High 7.5 Network Policy Server (NPS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70072 Medium 6.5 Windows Netlogon Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70074 Medium 5.5 Windows DNS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70071 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70069 High 8.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70067 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70066 High 7.0 Windows DHCP Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70055 Medium 5.5 Windows Cryptographic Services Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70006 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70004 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70012 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69998 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69992 High 7.5 Remote Desktop Services Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.