CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_1909 . Show all products
15 CVEs, showing 1 to 15
CVE Severity Title Published CVE-2021-28310 Known exploited
High 7.8 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Apr 13, 2021 CVE-2021-1732 Known exploited
High 7.8 Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Feb 25, 2021 CVE-2020-17087 Known exploited
High 7.8 Windows Kernel Local Elevation of Privilege Vulnerability Assigned by microsoft
Nov 11, 2020 CVE-2020-1472 Known exploited
Medium 5.5 Netlogon Elevation of Privilege Vulnerability Assigned by microsoft
Aug 17, 2020 CVE-2020-1464 Known exploited
High 7.8 Windows Spoofing Vulnerability Assigned by microsoft
Aug 17, 2020 CVE-2020-0986 Known exploited
High 7.8 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft
Jun 9, 2020 CVE-2020-1054 Known exploited
High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
May 21, 2020 CVE-2020-1027 Known exploited
High 7.8 An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft
Apr 15, 2020 CVE-2020-1020 Known exploited
High 8.8 A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft
Apr 15, 2020 CVE-2020-0938 Known exploited
High 7.8 A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft
Apr 15, 2020 CVE-2020-0796 Known exploited
Critical 10.0 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution… Assigned by microsoft
Mar 12, 2020 CVE-2020-0787 Known exploited
High 7.8 An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… Assigned by microsoft
Mar 12, 2020 CVE-2020-0683 Known exploited
High 7.8 An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Assigned by microsoft
Feb 11, 2020 CVE-2020-0638 Known exploited
High 7.8 An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim sys… Assigned by microsoft
Jan 14, 2020 CVE-2020-0601 Known exploited
High 8.1 A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code… Assigned by microsoft
Jan 14, 2020
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
