CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:visual_studio_2026_version_18.10 . Show all products
44 CVEs, showing 1 to 44
CVE Severity Title Published CVE-2026-109468 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 15, 2026 CVE-2026-105016 Critical 9.8 Microsoft QUIC Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70162 Medium 5.9 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102869 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102870 High 8.8 ASP.NET Core Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-58280 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96957 High 8.8 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96238 Medium 6.5 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96237 High 7.5 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96235 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96234 Medium 5.3 .NET Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96232 High 7.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96230 High 8.8 ASP.NET Core Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96229 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96225 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96231 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85363 High 8.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84008 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83520 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70035 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70007 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88092 Critical 9.4 ASP.NET Core Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96236 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96224 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96222 High 7.4 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70194 Medium 6.5 .NET Framework Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70197 High 8.1 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70188 Critical 9.1 ASP.NET Core Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70190 High 7.3 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70183 High 7.5 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70181 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70179 High 7.5 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70196 Medium 5.9 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70175 High 8.1 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70165 Medium 6.7 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70161 High 7.3 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70159 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70174 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70186 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87697 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85790 Medium 5.9 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-66822 Medium 5.9 .NET Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-103572 High 8.8 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
