Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2021-34486

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-34486

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-34486
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2659 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:13 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2021-34484

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-34484

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-34484
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2649 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:07 GMT
Publisher date: Thu, 31 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-24521

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-24521

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-24521
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2622 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:51 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-22718

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22718

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-22718
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2611 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:44 GMT
Publisher date: Tue, 19 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-21919

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-21919

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-21919
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2604 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:40 GMT
Publisher date: Mon, 25 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-26904

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-26904

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-26904
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2603 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:38 GMT
Publisher date: Mon, 25 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1385

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1385

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1385
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2591 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:30 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1130

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1130

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1130
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2590 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:29 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Privilege Escalation Vulnerability

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-0880

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0880

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0880
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2584 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:23 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows SMB Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-0703

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0703

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0703
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2583 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:23 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. CISA required action: Apply updates per vendor instructions.

Windows CVE-2020-1027

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-1027

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-1027
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2576 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:31 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory. CISA required action: Apply updates per vendor instructions.

Windows CVE-2017-8543

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-8543

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-8543
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2563 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:24 GMT
Publisher date: Tue, 24 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2017-0005

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0005

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0005
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2559 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:21 GMT
Publisher date: Tue, 24 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.

Windows CVE-2018-8611

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8611

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-8611
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2553 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:19 GMT
Publisher date: Tue, 24 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts. CISA required action: Apply updates per vendor instructions.

Windows CVE-2014-4148

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-4148

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-4148
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2535 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:07 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts. CISA required action: Apply updates per vendor instructions.

Windows CVE-2015-1671

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-1671

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-1671
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2534 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:07 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Privilege Escalation Vulnerability

The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2015-6175

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-6175

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-6175
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2533 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:06 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Mount Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links. CISA required action: Apply updates per vendor instructions.

Windows CVE-2015-1769

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-1769

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-1769
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2529 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:03 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges. CISA required action: Apply updates per vendor instructions.

Windows CVE-2015-0016

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-0016

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-0016
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2527 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:02 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system. CISA required action: Apply updates per vendor instructions.

Windows CVE-2016-7256

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-7256

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-7256
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2521 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:58 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

Older events