Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2021-41379

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-41379

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-41379
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2782 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:24:09 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. CISA required action: Apply updates per vendor instructions.

Windows CVE-2016-3309

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3309

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-3309
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2765 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:59 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. CISA required action: Apply updates per vendor instructions.

Windows CVE-2017-0101

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0101

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0101
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2764 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:58 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-0543

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0543

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0543
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2762 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:57 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-0841

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-0841

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-0841
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2761 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:56 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Windows CVE-2019-1064

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1064

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1064
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2760 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:56 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Windows CVE-2019-1129

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1129

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1129
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2757 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:54 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1253

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1253

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1253
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2756 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:53 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1315

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1315

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1315
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2755 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:53 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Privilege Escalation Vulnerability

Windows CVE-2019-1322

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1322

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1322
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2754 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:52 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2019-1405

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1405

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1405
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2753 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:52 GMT
Publisher date: Tue, 15 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site. CISA required action: Apply updates per vendor instructions.

Windows CVE-2014-6332

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-6332

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-6332
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2735 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:42 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows SMB Remote Code Execution Vulnerability

The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. CISA required action: Apply updates per vendor instructions.

Windows CVE-2017-0146

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0146

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0146
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2723 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:34 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Shell Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths. CISA required action: Apply updates per vendor instructions.

Windows CVE-2018-8414

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8414

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-8414
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2710 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:25 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. CISA required action: Apply updates per vendor instructions.

Windows CVE-2022-21999

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-21999

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-21999
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2688 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:31 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature. CISA required action: Apply updates per vendor instructions.

Windows CVE-2010-4398

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-4398

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2010-4398
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2685 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:29 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. CISA required action: Apply updates per vendor instructions.

Windows CVE-2015-2426

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2426

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-2426
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2672 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:21 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Kernel Privilege Escalation Vulnerability

The kernel in Microsoft Windows allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2016-0040

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-0040

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-0040
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2671 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:21 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application. CISA required action: Apply updates per vendor instructions.

Windows CVE-2017-0213

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0213

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-0213
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2663 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:15 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Windows Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). CISA required action: Apply updates per vendor instructions.

Windows CVE-2018-8440

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8440

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-8440
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2661 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:14 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

Older events