CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:50 UTC )
What this means for you
This week: 5,366 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,366 Show in the list Critical, last 7 days 353 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_10_1809 . Show all products
CVE Severity Title Published CVE-2026-59116 Medium 6.8 Windows Remote Desktop Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97789 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96096 Critical 9.8 Windows Media Player Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96108 High 7.8 Desktop Window Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-95904 Medium 5.5 Windows Event Logging Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69452 High 7.1 Windows Enterprise App Management Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96935 Medium 5.5 Windows NTFS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96928 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96921 Medium 5.5 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96920 High 7.8 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96867 High 7.8 Windows NTFS Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96865 Medium 5.6 Windows Secure Kernel Mode Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96864 Critical 9.8 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96861 High 7.5 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96860 Medium 5.5 Windows USB Print Driver Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96859 Medium 5.5 Windows Imaging Component Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96857 Medium 5.5 Windows Projected File System Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96856 High 7.8 Windows Management Instrumentation Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96855 Medium 5.5 Windows Modern Device Management (MDM) Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96862 High 7.8 Windows Spaceport.sys Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96851 Medium 5.5 Windows Management Instrumentation Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96866 High 7.5 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96848 Medium 5.5 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96318 High 7.8 Windows Resume Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96317 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96316 Medium 5.5 Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96315 Medium 5.5 Windows Overlay Filter Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96313 High 7.0 Windows Push Notifications Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96312 High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96314 Medium 5.5 Windows Audio Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96308 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96307 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96311 Medium 5.5 Windows Network List Service Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96306 High 7.8 Windows Sysmain Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96305 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96302 High 7.0 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96248 High 7.5 Windows Host Guardian Service Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96247 Medium 5.5 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96246 High 7.5 Network Policy Server (NPS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96245 High 7.5 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96244 High 7.8 Windows Internal System User Profile Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96222 High 7.4 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96220 High 7.8 Windows Assigned Access Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96219 Critical 9.8 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96218 Medium 5.5 Windows Update Stack Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96217 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96216 High 7.0 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70149 High 8.8 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70147 Critical 9.8 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70109 High 7.8 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.