CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:40 UTC )
What this means for you
This week: 5,345 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,345 Show in the list Critical, last 7 days 351 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_2025 . Show all products
CVE Severity Title Published CVE-2026-83507 Medium 5.5 Windows Update Orchestrator Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83508 High 7.8 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83506 High 7.8 Servicing Stack Updates Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83505 High 7.0 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-81971 High 7.0 Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69454 High 7.5 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69326 High 8.8 Graphic Fonts Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-77496 High 8.8 Windows Imaging Component Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-73027 High 7.8 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69635 Medium 6.6 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-78459 High 7.8 Microsoft Internet Information Services Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69596 High 7.0 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69577 High 7.5 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69471 High 7.8 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69783 High 7.8 Windows Update Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69733 High 7.8 Windows Update Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69640 Medium 5.3 Windows Key Distribution Center Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69765 High 8.8 Windows Storport Miniport Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69736 High 7.0 Windows Credential Manager Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70295 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70294 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70293 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70292 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70288 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70258 High 8.8 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70237 High 7.0 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70236 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70232 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70209 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70208 Medium 5.5 HTTP.sys Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70230 High 7.0 Windows Audio Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70201 Medium 5.5 Windows DHCP Server Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70211 Medium 5.5 Win32k Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70199 Medium 5.5 Windows Kernel Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70157 Critical 9.8 Windows System Information Console Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70207 High 7.5 Network Policy Server (NPS) Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70144 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70075 Medium 4.4 Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70072 Medium 6.5 Windows Netlogon Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70074 Medium 5.5 Windows DNS Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70071 Medium 5.5 Role: DNS Server Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70069 High 8.8 Windows DHCP Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70067 High 7.0 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70066 High 7.0 Windows DHCP Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70055 Medium 5.5 Windows Cryptographic Services Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70051 High 7.8 Windows SmartScreen Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70006 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70004 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70012 High 7.5 Remote Desktop Client Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69999 Medium 5.5 Windows Update Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.