The internet is broken right now.
93 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.
-
CVE-2026-96184
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96965
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
-
CVE-2026-96969
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96177
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96171
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96157
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96158
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96160
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96164
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96150
Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.
-
CVE-2026-96152
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96153
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96155
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96156
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.
-
CVE-2026-96144
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
CVE-2026-96126
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96127
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96134
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96112
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.
-
CVE-2026-96115
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
-
CVE-2026-96117
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96124
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96102
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96103
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96107
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96110
Use after free in Windows OLE allows an authorized attacker to disclose information locally.
-
CVE-2026-96085
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96086
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.
-
CVE-2026-96092
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96093
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.
-
CVE-2026-96077
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96078
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96081
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96082
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
-
CVE-2026-96084
Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96073
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96074
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96076
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96061
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96062
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96064
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
-
CVE-2026-96066
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96067
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96072
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96056
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96057
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96058
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.
-
CVE-2026-96059
Use after free in HID class driver allows an authorized attacker to disclose information locally.
-
CVE-2026-96060
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96051
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.