The internet is broken right now.
93 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.
-
CVE-2026-96052
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96054
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.
-
CVE-2026-96055
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96042
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96043
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96046
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96047
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96048
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
CVE-2026-96035
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96036
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96037
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96041
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-96026
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96027
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96028
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96031
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96017
Use after free in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-96020
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
-
CVE-2026-96022
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
-
CVE-2026-96023
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96004
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96005
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96007
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96008
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96010
Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-96016
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95997
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95999
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96002
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
-
CVE-2026-95987
Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95989
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95991
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95996
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-95975
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.
-
CVE-2026-95977
Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.
-
CVE-2026-95979
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95965
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95966
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95968
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95974
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95962
Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-95960
Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95961
Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95953
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95956
Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network.
-
CVE-2026-95948
Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95950
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95951
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95934
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-95935
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.