CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:00 UTC )
This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_10_21h2 . Show all products
2,579 CVEs, showing 1 to 50 Page 1 of 52 Next CVE Severity Title Published CVE-2026-108136 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108135 High 7.0 Windows Backup Engine Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108132 High 7.0 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108131 High 7.5 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108129 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108128 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108127 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97844 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97843 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97842 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97841 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97840 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97839 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97838 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97837 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97836 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97835 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97834 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97833 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97832 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97831 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97829 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97828 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97827 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97826 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97825 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97824 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97823 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97822 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97821 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97820 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97819 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97817 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97816 Critical 9.8 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97815 Critical 9.8 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97814 Critical 9.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97813 Medium 6.5 Windows Hyper-V Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97812 High 7.0 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97811 High 7.8 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97809 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97808 High 7.0 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97807 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97806 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97805 Critical 9.8 Windows Partition Management Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97804 High 7.8 HID Class Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97798 High 7.8 Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105010 Critical 9.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105008 Critical 9.0 Windows Schannel Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105007 High 8.8 Windows NDIS Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105006 Medium 6.4 HID Class Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
