CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:windows_server_version_20h2 . Show all products
26 CVEs, showing 1 to 26
CVE Severity Title Published CVE-2022-34713 Known exploited
High 7.8 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft
Aug 9, 2022 CVE-2022-22047 Known exploited
High 7.8 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft
Jul 12, 2022 CVE-2022-30190 Known exploited
High 7.8 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft
Jun 1, 2022 CVE-2022-26925 Known exploited
High 8.1 Windows LSA Spoofing Vulnerability Assigned by microsoft
May 10, 2022 CVE-2022-26923 Known exploited
High 8.8 Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft
May 10, 2022 CVE-2022-26904 Known exploited
High 7.0 Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft
Apr 15, 2022 CVE-2022-24545 High 8.1 Windows Kerberos Remote Code Execution Vulnerability Assigned by microsoft
Apr 15, 2022 CVE-2022-24521 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Apr 15, 2022 CVE-2022-24486 High 7.8 Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft
Apr 15, 2022 CVE-2022-22718 Known exploited
High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
Feb 9, 2022 CVE-2022-21999 Known exploited
High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft
Feb 9, 2022 CVE-2022-21971 Known exploited
High 7.8 Windows Runtime Remote Code Execution Vulnerability Assigned by microsoft
Feb 9, 2022 CVE-2022-21919 Known exploited
High 7.0 Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft
Jan 11, 2022 CVE-2022-21882 Known exploited
High 7.0 Win32k Elevation of Privilege Vulnerability Assigned by microsoft
Jan 11, 2022 CVE-2021-42287 Known exploited
High 7.5 Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft
Nov 10, 2021 CVE-2021-42278 Known exploited
High 7.5 Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft
Nov 10, 2021 CVE-2021-41379 Known exploited
Medium 5.5 Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft
Nov 10, 2021 CVE-2021-40444 Known exploited
High 8.8 Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft
Sep 15, 2021 CVE-2021-36955 Known exploited
High 7.8 Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft
Sep 15, 2021 CVE-2021-36948 Known exploited
High 7.8 Windows Update Medic Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 12, 2021 CVE-2021-36942 Known exploited
High 7.5 Windows LSA Spoofing Vulnerability Assigned by microsoft
Aug 12, 2021 CVE-2021-34486 Known exploited
High 7.8 Windows Event Tracing Elevation of Privilege Vulnerability Assigned by microsoft
Aug 12, 2021 CVE-2021-34484 Known exploited
High 7.8 Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft
Aug 12, 2021 CVE-2021-33771 Known exploited
High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2021 CVE-2021-31979 Known exploited
High 7.8 Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2021 CVE-2021-34527 Known exploited
High 8.8 Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft
Jul 2, 2021
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
