CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
What this means for you
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2025 . Show all products
CVE Severity Title Published CVE-2026-85874 High 7.8 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83935 Critical 9.8 Microsoft XML Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83934 High 8.8 Windows GDI+ Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83933 Medium 5.5 Windows Update Orchestrator Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83930 High 7.0 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83931 High 7.8 Windows Hyper-V Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83925 Medium 4.7 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83924 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83923 High 8.8 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83918 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83915 High 7.0 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85912 High 7.0 Clipboard User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83913 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85911 High 7.8 Windows StateRepository API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85910 Medium 5.5 Windows StateRepository API Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85909 Medium 5.5 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83910 Critical 9.8 RPC Runtime Library Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85908 High 7.8 Windows Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83908 High 7.0 RPC Runtime Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85906 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85905 High 8.8 Windows UI Immersive Server API Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83905 Medium 4.7 Windows Shell Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83904 Medium 5.5 HID Parser Library Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85903 High 8.8 Windows Domain Name Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85902 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85901 High 7.8 Windows Graphics Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85872 High 7.8 Windows Storage VSP Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83903 High 7.8 Windows Direct Composition Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83900 High 7.0 Windows Bind Filter Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83899 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83897 Medium 4.7 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83889 High 8.8 Windows DNS Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83873 High 7.8 Windows Shell Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83877 High 7.8 Windows Devices Human Interface Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83895 Medium 6.8 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83898 Medium 5.5 HID Parser Library Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83884 Medium 5.5 Windows Human Interface Device Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83887 Medium 5.5 HID Parser Library Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83881 High 7.8 Windows exFAT File System Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83883 High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83874 High 8.8 Windows Event Tracing Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83863 High 7.8 Servicing Stack Updates Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83861 High 7.8 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83860 High 7.5 Windows GDI Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83859 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83857 High 7.8 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83856 High 7.5 Windows Event Logging Service Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83850 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83845 High 8.4 Windows Internet (wininet.dll) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83841 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.