Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system. CISA required action: Apply updates per vendor instructions.

Windows CVE-2016-3393

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3393

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-3393
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2520 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:58 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code. CISA required action: Apply updates per vendor instructions.

Windows CVE-2012-0151

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0151

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-0151
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2504 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:48 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-30190

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-30190

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-30190
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1479 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:03:00 GMT
Publisher date: Tue, 14 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows LSA Spoofing Vulnerability

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM. CISA required action: Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].

Windows CVE-2022-26925

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-26925

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-26925
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1470 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:55 GMT
Publisher date: Fri, 01 Jul 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-22047

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22047

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-22047
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1468 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:53 GMT
Publisher date: Tue, 12 Jul 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-34713

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-34713

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-34713
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1465 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:52 GMT
Publisher date: Tue, 09 Aug 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-21971

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-21971

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-21971
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1462 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:50 GMT
Publisher date: Thu, 18 Aug 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-37969

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-37969

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-37969
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1431 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:28 GMT
Publisher date: Wed, 14 Sep 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Remote Code Execution Vulnerability

Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user. CISA required action: Apply updates per vendor instructions.

Windows CVE-2010-2568

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-2568

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2010-2568
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1430 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:27 GMT
Publisher date: Thu, 15 Sep 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-41128

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-41128

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-41128
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1406 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:09 GMT
Publisher date: Tue, 08 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-41125

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-41125

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-41125
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1404 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:07 GMT
Publisher date: Tue, 08 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-41073

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-41073

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-41073
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1403 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:07 GMT
Publisher date: Tue, 08 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-41091

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-41091

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-41091
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1400 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:04 GMT
Publisher date: Tue, 08 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Windows CVE-2022-41049

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-41049

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-41049
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1399 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:04 GMT
Publisher date: Mon, 14 Nov 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2023-21674

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-21674

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-21674
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1389 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:58 GMT
Publisher date: Tue, 10 Jan 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2023-21823

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-21823

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-21823
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1379 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:52 GMT
Publisher date: Tue, 14 Feb 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2023-23376

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-23376

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-23376
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1377 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:50 GMT
Publisher date: Tue, 14 Feb 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file. CISA required action: Apply updates per vendor instructions.

Windows CVE-2023-24880

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-24880

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-24880
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1364 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:42 GMT
Publisher date: Tue, 14 Mar 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1388

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1388

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1388
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1350 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:32 GMT
Publisher date: Fri, 07 Apr 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2023-28252

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-28252

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-28252
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1343 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:26 GMT
Publisher date: Tue, 11 Apr 2023 00:00:00 GMT

Read the original announcement

Older events