CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:00 UTC )
This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_11_23h2 . Show all products
2,394 CVEs, showing 1 to 50 Page 1 of 48 Next CVE Severity Title Published CVE-2026-105016 Critical 9.8 Microsoft QUIC Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108136 High 7.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108135 High 7.0 Windows Backup Engine Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108132 High 7.0 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108131 High 7.5 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108129 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108128 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108127 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97844 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97843 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97842 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97841 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97840 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97839 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97838 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97837 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97836 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97835 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97834 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97833 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97832 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97831 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97830 High 7.5 Windows Internet Information Services Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97829 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97828 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97827 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97826 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97825 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97824 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97823 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97822 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97821 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97820 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97819 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97817 Medium 6.5 Role: DNS Server Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97816 Critical 9.8 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97815 Critical 9.8 Windows Error Reporting Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97814 Critical 9.8 Windows Text Shaping Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97813 Medium 6.5 Windows Hyper-V Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97812 High 7.0 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97811 High 7.8 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97809 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97808 High 7.0 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97807 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97806 High 7.8 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97805 Critical 9.8 Windows Partition Management Driver Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97804 High 7.8 HID Class Driver Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97798 High 7.8 Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105010 Critical 9.8 Microsoft Windows Search Component Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-105008 Critical 9.0 Windows Schannel Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
