The internet is broken right now.
90 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 37 more already have a fix that someone still has to apply.
-
CVE-2026-102214
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
-
CVE-2026-116574
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switch_xml_ampencode() reserved only ten bytes for the widest numeric character reference produced from a four-byte UTF-8 sequence, omitting space for the terminating NUL. When remote-supplied text was serialized at the exact buffer-growth boundary, the terminator wrote one byte beyond the heap allocation. Reachable surfaces include mod_xml_cdr, conference and formatted CDR XML, XML Event Socket output, and XML API output that serializes caller-controlled values. The fixed zero-byte write can abort the process or truncate an adjacent object, while remote code execution has not been demonstrated. This issue is fixed in version 1.11.2.
-
CVE-2026-86988
The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
-
CVE-2026-83913
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83903
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83876
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83877
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83881
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83882
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83883
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83760
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-83690
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83637
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83579
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83567
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83570
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83518
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83513
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83514
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83508
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70566
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70285
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70143
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
-
CVE-2026-70138
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70139
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70121
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70112
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
-
CVE-2026-70113
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70114
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70093
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70102
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70059
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70048
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70027
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70023
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70010
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70015
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70008
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69959
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
-
CVE-2026-69950
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69952
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69953
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69949
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69916
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69884
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69898
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69867
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69798
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69633
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69471
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.