The internet is broken right now.
33 critical CVEs without a fix in the last 48 hours. The pager is warming up. 24 more already have a fix that someone still has to apply.
-
CVE-2026-97741
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97742
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97745
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88144
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70215
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
CVE-2026-100220
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83688
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83643
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83523
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
-
CVE-2026-77496
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70258
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70262
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-70210
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-70149
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
-
CVE-2026-70089
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70068
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-85809
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
CVE-2026-85814
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97839
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97840
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97841
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97835
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97836
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97837
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97838
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-83748
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83778
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70301
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70302
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70343
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70287
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70282
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70268
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70256
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70257
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
CVE-2026-100212
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85797
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-97756
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85806
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97844
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97843
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97831
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-108400
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
CVE-2026-102857
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96952
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-97769
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83891
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-17401
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
-
CVE-2026-83935
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96232
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.