CVE-20XX-?
agent?

The internet is broken right now.

34 critical CVEs without a fix in the last 48 hours. Shut it all down? Asking for a sysadmin. 25 more already have a fix that someone still has to apply.

3,532 CVEs · updated 2026-11-10 13:31 UTC

Reset all
  1. CVE-2026-97780

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  2. CVE-2026-97776

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  3. CVE-2026-97765

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  4. CVE-2026-97761

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  5. CVE-2026-97739

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  6. CVE-2026-88155

    Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sharepoint Server

    8.8 HIGH 0.8% exploit odds Fix listed
  7. CVE-2026-105716

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  8. CVE-2026-105591

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  9. CVE-2026-105593

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  10. CVE-2026-105595

    Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  11. CVE-2026-105596

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  12. CVE-2026-105597

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  13. CVE-2026-105598

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  14. CVE-2026-79847

    Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

    Memory safety Network gear

    10.0 CRITICAL 0.8% exploit odds No fix listed
  15. CVE-2026-70127

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    8.1 HIGH 0.8% exploit odds Fix listed
  16. CVE-2026-100218

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    8.1 HIGH 0.8% exploit odds Fix listed
  17. CVE-2026-88184

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Memory safety Microsoft 365 Apps

    6.5 MEDIUM 0.8% exploit odds Fix listed
  18. CVE-2026-67628

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server

    4.9 MEDIUM 0.8% exploit odds No fix listed
  19. CVE-2026-97755

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  20. CVE-2026-97759

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  21. CVE-2026-97753

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  22. CVE-2026-85790

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 11 23h2

    5.9 MEDIUM 0.8% exploit odds Fix listed
  23. CVE-2026-83914

    Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    8.1 HIGH 0.8% exploit odds Fix listed
  24. CVE-2026-70007

    Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

    Memory safety Library

    8.8 HIGH 0.8% exploit odds No fix listed
  25. CVE-2026-69985

    Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1809

    8.8 HIGH 0.8% exploit odds Fix listed
  26. CVE-2026-69765

    Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2025

    8.8 HIGH 0.8% exploit odds Fix listed
  27. CVE-2026-69521

    Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    8.8 HIGH 0.8% exploit odds Fix listed
  28. CVE-2026-88081

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server

    7.7 HIGH 0.8% exploit odds No fix listed
  29. CVE-2026-85888

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server

    7.7 HIGH 0.8% exploit odds No fix listed
  30. CVE-2026-123961

    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

    Memory safety Network gear

    8.6 HIGH 0.8% exploit odds No fix listed
  31. CVE-2026-123960

    A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

    Memory safety

    8.6 HIGH 0.8% exploit odds No fix listed
  32. CVE-2026-100134

    Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Memory safety Browser & mail

    8.8 HIGH 0.8% exploit odds No fix listed
  33. CVE-2026-97833

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.8% exploit odds Fix listed
  34. CVE-2026-97834

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.8% exploit odds Fix listed
  35. CVE-2026-97832

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.8% exploit odds Fix listed
  36. CVE-2026-9659

    Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnUser parameter.

    Memory safety

    9.1 CRITICAL 0.8% exploit odds No fix listed
  37. CVE-2026-85859

    Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.8% exploit odds Fix listed
  38. CVE-2026-70269

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.1 HIGH 0.8% exploit odds Fix listed
  39. CVE-2026-70197

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.1 HIGH 0.8% exploit odds No fix listed
  40. CVE-2026-102198

    Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    5.3 MEDIUM 0.8% exploit odds Fix listed
  41. CVE-2026-88185

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.1 HIGH 0.8% exploit odds Fix listed
  42. CVE-2026-70187

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.1 HIGH 0.8% exploit odds No fix listed
  43. CVE-2026-102855

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  44. CVE-2026-97842

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows 10 1607

    6.5 MEDIUM 0.8% exploit odds Fix listed
  45. CVE-2026-86991

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination.

    Memory safety OS & kernel Apple Ipados

    7.5 HIGH 0.8% exploit odds Fix listed
  46. CVE-2026-70062

    Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows 10 1809

    8.1 HIGH 0.8% exploit odds Fix listed
  47. CVE-2026-112410

    A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination.

    Memory safety OS & kernel Apple macOS

    7.5 HIGH 0.8% exploit odds Fix listed
  48. CVE-2026-102849

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  49. CVE-2026-102850

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  50. CVE-2026-83851

    Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

    Memory safety OS & kernel Microsoft Windows 10 1809

    8.8 HIGH 0.8% exploit odds Fix listed