CVE-20XX-?
agent?

The internet is broken right now.

93 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.

4,441 CVEs · updated 2026-11-11 13:47 UTC

Reset all
  1. CVE-2026-96184

    Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  2. CVE-2026-96965

    Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

    Memory safety OS & kernel

    5.3 MEDIUM No fix listed
  3. CVE-2026-96969

    Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  4. CVE-2026-96177

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.1 HIGH No fix listed
  5. CVE-2026-96171

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  6. CVE-2026-96157

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    9.8 CRITICAL No fix listed
  7. CVE-2026-96158

    Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  8. CVE-2026-96160

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  9. CVE-2026-96164

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  10. CVE-2026-96150

    Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.6 MEDIUM No fix listed
  11. CVE-2026-96152

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  12. CVE-2026-96153

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  13. CVE-2026-96155

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  14. CVE-2026-96156

    Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  15. CVE-2026-96144

    Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed
  16. CVE-2026-96126

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  17. CVE-2026-96127

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  18. CVE-2026-96134

    Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  19. CVE-2026-96112

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  20. CVE-2026-96115

    Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

    Memory safety OS & kernel

    8.0 HIGH No fix listed
  21. CVE-2026-96117

    Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  22. CVE-2026-96124

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  23. CVE-2026-96102

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  24. CVE-2026-96103

    Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  25. CVE-2026-96107

    Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  26. CVE-2026-96110

    Use after free in Windows OLE allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  27. CVE-2026-96085

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  28. CVE-2026-96086

    Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  29. CVE-2026-96092

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.1 HIGH No fix listed
  30. CVE-2026-96093

    Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed
  31. CVE-2026-96077

    Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  32. CVE-2026-96078

    Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    9.8 CRITICAL No fix listed
  33. CVE-2026-96081

    Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  34. CVE-2026-96082

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  35. CVE-2026-96084

    Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  36. CVE-2026-96073

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  37. CVE-2026-96074

    Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  38. CVE-2026-96076

    Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  39. CVE-2026-96061

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  40. CVE-2026-96062

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  41. CVE-2026-96064

    Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  42. CVE-2026-96066

    Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  43. CVE-2026-96067

    Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    9.8 CRITICAL No fix listed
  44. CVE-2026-96072

    Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  45. CVE-2026-96056

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  46. CVE-2026-96057

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  47. CVE-2026-96058

    Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

    Memory safety OS & kernel

    4.6 MEDIUM No fix listed
  48. CVE-2026-96059

    Use after free in HID class driver allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  49. CVE-2026-96060

    Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  50. CVE-2026-96051

    Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed