CVE-20XX-?

The internet is broken right now.

26 critical CVEs without a fix in the last 48 hours. Someone is about to unplug something. 45 more already have a fix that someone still has to apply.

468 CVEs · updated 2026-11-06 06:24 UTC

Reset all
  1. CVE-2026-97749

    Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft 365 Apps

    9.8 CRITICAL 1% exploit odds Fix listed
  2. CVE-2026-97016

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft 365 Apps

    9.8 CRITICAL 1% exploit odds Fix listed
  3. CVE-2026-88156

    Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft 365 Apps

    9.8 CRITICAL 1% exploit odds Fix listed
  4. CVE-2026-100134

    Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Memory safety Browser & mail

    8.8 HIGH 0.8% exploit odds No fix listed
  5. CVE-2026-83831

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  6. CVE-2026-97012

    Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft 365 Apps

    8.8 HIGH 0.7% exploit odds Fix listed
  7. CVE-2026-113303

    Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.7% exploit odds Fix listed
  8. CVE-2026-112621

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing a maliciously crafted image may result in memory corruption.

    Memory safety Browser & mail Apple Ipados

    7.5 HIGH 0.6% exploit odds Fix listed
  9. CVE-2026-85899

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.1 HIGH 0.6% exploit odds Fix listed
  10. CVE-2026-88077

    Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  11. CVE-2026-112654

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

    Memory safety Browser & mail Apple Safari

    4.3 MEDIUM 0.6% exploit odds Fix listed
  12. CVE-2026-112655

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.6% exploit odds Fix listed
  13. CVE-2026-112695

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

    Memory safety Browser & mail Apple Safari

    4.3 MEDIUM 0.6% exploit odds Fix listed
  14. CVE-2026-112653

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

    Memory safety Browser & mail Apple Safari

    4.3 MEDIUM 0.6% exploit odds Fix listed
  15. CVE-2026-113163

    Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.6% exploit odds Fix listed
  16. CVE-2026-112626

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.6% exploit odds Fix listed
  17. CVE-2026-96198

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  18. CVE-2026-96199

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  19. CVE-2026-85890

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  20. CVE-2026-85897

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  21. CVE-2026-96203

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.6% exploit odds Fix listed
  22. CVE-2026-96192

    Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge

    8.8 HIGH 0.6% exploit odds Fix listed
  23. CVE-2026-113161

    Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.6% exploit odds Fix listed
  24. CVE-2026-113904

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    Memory safety Browser & mail Apple Safari

    4.3 MEDIUM 0.6% exploit odds Fix listed
  25. CVE-2026-113072

    Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.6% exploit odds Fix listed
  26. CVE-2026-112697

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.6% exploit odds Fix listed
  27. CVE-2026-113043

    Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  28. CVE-2026-112639

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.5% exploit odds Fix listed
  29. CVE-2026-112637

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.5% exploit odds Fix listed
  30. CVE-2026-112651

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.5% exploit odds Fix listed
  31. CVE-2026-112623

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

    Memory safety Browser & mail Apple Safari

    8.8 HIGH 0.5% exploit odds Fix listed
  32. CVE-2026-113901

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    Memory safety Browser & mail Apple Safari

    4.3 MEDIUM 0.5% exploit odds Fix listed
  33. CVE-2026-117917

    Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    9.8 CRITICAL 0.5% exploit odds Fix listed
  34. CVE-2026-117862

    Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    9.8 CRITICAL 0.5% exploit odds Fix listed
  35. CVE-2026-107302

    msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked out-of-bounds buffer read and throws RangeError instead of IncompleteBufferError, which can unexpectedly terminate a request, stream, or worker in applications that wait for additional bytes after IncompleteBufferError. There is no adjacent-memory disclosure because the buffer implementation checks bounds. This issue is fixed in version 6.1.0.

    Memory safety Browser & mail

    7.5 HIGH 0.5% exploit odds Fix listed
  36. CVE-2026-110152

    Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.5% exploit odds Fix listed
  37. CVE-2026-113279

    Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  38. CVE-2026-113280

    Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  39. CVE-2026-113271

    Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  40. CVE-2026-113225

    Use after free in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    6.5 MEDIUM 0.5% exploit odds Fix listed
  41. CVE-2026-86986

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    Memory safety Browser & mail Apple Safari

    7.5 HIGH 0.5% exploit odds Fix listed
  42. CVE-2026-113336

    Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.5% exploit odds Fix listed
  43. CVE-2026-113020

    Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.5% exploit odds Fix listed
  44. CVE-2026-113399

    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

    Memory safety Browser & mail

    9.8 CRITICAL 0.5% exploit odds Fix listed
  45. CVE-2026-113334

    Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  46. CVE-2026-121156

    Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.5% exploit odds Fix listed
  47. CVE-2026-108448

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft 365 Apps

    7.5 HIGH 0.5% exploit odds Fix listed
  48. CVE-2026-113037

    Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  49. CVE-2026-121129

    Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed
  50. CVE-2026-121127

    Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.5% exploit odds Fix listed