CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product microsoft:windows_10_20h2. Show all products

56 CVEs, showing 1 to 50Page 1 of 2Next

CVE	Severity	Title	Published
CVE-2023-28252 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 11, 2023
CVE-2023-28229 Known exploited	High 7.0	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft	Apr 11, 2023
CVE-2023-24880 Known exploited	Medium 4.4	Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft	Mar 14, 2023
CVE-2023-21823 Known exploited	High 7.8	Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft	Feb 14, 2023
CVE-2023-23376 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Feb 14, 2023
CVE-2023-21674 Known exploited	High 8.8	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Assigned by microsoft	Jan 10, 2023
CVE-2022-44698 Known exploited	Medium 5.4	Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft	Dec 13, 2022
CVE-2022-41128 Known exploited	High 8.8	Windows Scripting Languages Remote Code Execution Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41125 Known exploited	High 7.8	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41091 Known exploited	Medium 5.4	Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41073 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41049 Known exploited	Medium 5.4	Windows Mark of the Web Security Feature Bypass Vulnerability Assigned by microsoft	Nov 9, 2022
CVE-2022-41033 Known exploited	High 7.8	Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft	Oct 11, 2022
CVE-2022-38028 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Oct 11, 2022
CVE-2022-37969 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Sep 13, 2022
CVE-2022-34713 Known exploited	High 7.8	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft	Aug 9, 2022
CVE-2022-22047 Known exploited	High 7.8	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft	Jul 12, 2022
CVE-2022-30190 Known exploited	High 7.8	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft	Jun 1, 2022
CVE-2022-26925 Known exploited	High 8.1	Windows LSA Spoofing Vulnerability Assigned by microsoft	May 10, 2022
CVE-2022-26923 Known exploited	High 8.8	Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft	May 10, 2022
CVE-2022-26904 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24545	High 8.1	Windows Kerberos Remote Code Execution Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24521 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24486	High 7.8	Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-22718 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21999 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21971 Known exploited	High 7.8	Windows Runtime Remote Code Execution Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21919 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Jan 11, 2022
CVE-2022-21882 Known exploited	High 7.0	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Jan 11, 2022
CVE-2021-43226 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Dec 15, 2021
CVE-2021-41379 Known exploited	Medium 5.5	Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft	Nov 10, 2021
CVE-2021-41357 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-40450 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-40449 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-40444 Known exploited	High 8.8	Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft	Sep 15, 2021
CVE-2021-36955 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Sep 15, 2021
CVE-2021-36948 Known exploited	High 7.8	Windows Update Medic Service Elevation of Privilege Vulnerability Assigned by microsoft	Aug 12, 2021
CVE-2021-34486 Known exploited	High 7.8	Windows Event Tracing Elevation of Privilege Vulnerability Assigned by microsoft	Aug 12, 2021
CVE-2021-34484 Known exploited	High 7.8	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Aug 12, 2021
CVE-2021-36934 Known exploited	High 7.8	Windows Elevation of Privilege Vulnerability Assigned by microsoft	Jul 22, 2021
CVE-2021-34448 Known exploited	Medium 6.8	Scripting Engine Memory Corruption Vulnerability Assigned by microsoft	Jul 16, 2021
CVE-2021-33771 Known exploited	High 7.8	Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft	Jul 14, 2021
CVE-2021-31979 Known exploited	High 7.8	Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft	Jul 14, 2021
CVE-2021-34527 Known exploited	High 8.8	Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft	Jul 2, 2021
CVE-2021-33742 Known exploited	High 7.5	Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft	Jun 8, 2021
CVE-2021-33739 Known exploited	High 8.4	Microsoft DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft	Jun 8, 2021
CVE-2021-31956 Known exploited	High 7.8	Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft	Jun 8, 2021
CVE-2021-31955 Known exploited	Medium 5.5	Windows Kernel Information Disclosure Vulnerability Assigned by microsoft	Jun 8, 2021
CVE-2021-31201 Known exploited	Medium 5.2	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft	Jun 8, 2021
CVE-2021-31199 Known exploited	Medium 5.2	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft	Jun 8, 2021

Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.