The internet is broken right now.
90 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 38 more already have a fix that someone still has to apply.
-
CVE-2026-114042
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash the client during teardown.
-
CVE-2026-97803
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-97806
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96947
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96950
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96946
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96912
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96916
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96843
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96324
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96249
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96118
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88134
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88128
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87702
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87699
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
-
CVE-2026-87694
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85911
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85905
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85874
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
-
CVE-2026-83861
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83863
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83857
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83859
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83850
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83833
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83828
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83829
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83832
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83796
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83783
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83779
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83757
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83758
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
-
CVE-2026-83762
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83753
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83721
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83726
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83716
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
-
CVE-2026-83709
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83712
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
-
CVE-2026-83698
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83700
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83691
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83692
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83679
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83678
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83650
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83652
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-83638
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.