CVE-20XX-?
agent?

The internet is broken right now.

96 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.

198 CVEs · updated 2026-11-11 15:51 UTC

Reset all
  1. CVE-2026-70229

    Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    8.1 HIGH 1% exploit odds Fix listed
  2. CVE-2026-69640

    Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.3 MEDIUM 0.7% exploit odds Fix listed
  3. CVE-2026-112427

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.

    Auth & access OS & kernel Apple macOS

    8.1 HIGH 0.7% exploit odds Fix listed
  4. CVE-2026-69982

    Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.9 MEDIUM 0.6% exploit odds Fix listed
  5. CVE-2026-83928

    Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    8.8 HIGH 0.6% exploit odds Fix listed
  6. CVE-2026-113947

    This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.

    Auth & access OS & kernel Apple macOS

    8.8 HIGH 0.5% exploit odds Fix listed
  7. CVE-2026-112480

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user with screen sharing access may be able to view another user's screen.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  8. CVE-2026-86868

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users.

    Auth & access OS & kernel Apple macOS

    9.1 CRITICAL 0.5% exploit odds Fix listed
  9. CVE-2026-112542

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  10. CVE-2026-60432

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

    Auth & access OS & kernel Oracle Solaris

    9.8 CRITICAL 0.5% exploit odds Fix listed
  11. CVE-2026-96858

    Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    5.5 MEDIUM 0.5% exploit odds Fix listed
  12. CVE-2026-101537

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

    Auth & access OS & kernel Oracle Solaris

    9.8 CRITICAL 0.4% exploit odds Fix listed
  13. CVE-2026-87714

    Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.4% exploit odds Fix listed
  14. CVE-2026-79881

    An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

    Auth & access OS & kernel

    8.3 HIGH 0.4% exploit odds No fix listed
  15. CVE-2026-85884

    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 11 24h2

    7.8 HIGH 0.4% exploit odds Fix listed
  16. CVE-2026-112473

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

    Auth & access OS & kernel Apple macOS

    7.4 HIGH 0.4% exploit odds Fix listed
  17. CVE-2026-112447

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences.

    Auth & access OS & kernel Apple macOS

    5.3 MEDIUM 0.4% exploit odds Fix listed
  18. CVE-2026-83766

    Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

    Auth & access OS & kernel Microsoft Windows 10 1607

    4.2 MEDIUM 0.4% exploit odds Fix listed
  19. CVE-2026-70137

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.5 MEDIUM 0.4% exploit odds Fix listed
  20. CVE-2026-69971

    Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 11 24h2

    5.5 MEDIUM 0.4% exploit odds Fix listed
  21. CVE-2026-70280

    Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    4.4 MEDIUM 0.4% exploit odds Fix listed
  22. CVE-2026-86939

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    4.9 MEDIUM 0.4% exploit odds Fix listed
  23. CVE-2026-96183

    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 11 24h2

    5.5 MEDIUM 0.4% exploit odds Fix listed
  24. CVE-2026-121022

    Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.

    Auth & access OS & kernel

    9.2 CRITICAL 0.4% exploit odds No fix listed
  25. CVE-2026-81964

    Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    5.5 MEDIUM 0.3% exploit odds Fix listed
  26. CVE-2026-69905

    Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  27. CVE-2026-62879

    Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  28. CVE-2026-83764

    Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  29. CVE-2026-83658

    Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  30. CVE-2026-83583

    Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    7.8 HIGH 0.3% exploit odds Fix listed
  31. CVE-2026-83568

    Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 11 24h2

    7.8 HIGH 0.3% exploit odds Fix listed
  32. CVE-2026-70580

    Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    8.8 HIGH 0.3% exploit odds Fix listed
  33. CVE-2026-70299

    Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 11 23h2

    8.8 HIGH 0.3% exploit odds Fix listed
  34. CVE-2026-85938

    Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  35. CVE-2026-105733

    Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    8.8 HIGH 0.3% exploit odds Fix listed
  36. CVE-2026-83854

    Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

    Auth & access OS & kernel Microsoft Windows 10 1809

    5.5 MEDIUM 0.3% exploit odds Fix listed
  37. CVE-2026-100217

    Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    7.8 HIGH 0.3% exploit odds Fix listed
  38. CVE-2026-69945

    Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    8.8 HIGH 0.3% exploit odds Fix listed
  39. CVE-2026-96926

    Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.5 MEDIUM 0.3% exploit odds Fix listed
  40. CVE-2026-83715

    Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    7.1 HIGH 0.3% exploit odds Fix listed
  41. CVE-2026-70235

    Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

    Auth & access OS & kernel Microsoft Windows 11 24h2

    5.5 MEDIUM 0.3% exploit odds Fix listed
  42. CVE-2026-70085

    Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows Server 2012

    5.5 MEDIUM 0.3% exploit odds Fix listed
  43. CVE-2026-70087

    Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.5 MEDIUM 0.3% exploit odds Fix listed
  44. CVE-2026-70083

    Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.5 MEDIUM 0.3% exploit odds Fix listed
  45. CVE-2026-70057

    Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    5.5 MEDIUM 0.3% exploit odds Fix listed
  46. CVE-2026-105009

    Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows Server 2012

    7.5 HIGH 0.3% exploit odds Fix listed
  47. CVE-2026-103560

    Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

    Auth & access OS & kernel Microsoft Windows Server 2012

    5.5 MEDIUM 0.3% exploit odds Fix listed
  48. CVE-2026-97792

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 11 23h2

    7.8 HIGH 0.3% exploit odds Fix listed
  49. CVE-2026-96918

    Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 10 1607

    7.8 HIGH 0.3% exploit odds Fix listed
  50. CVE-2026-83792

    Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows 10 21h2

    7.8 HIGH 0.3% exploit odds Fix listed