CVE-20XX-?
agent?

The internet is broken right now.

94 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 35 more already have a fix that someone still has to apply.

4,439 CVEs · updated 2026-11-11 14:50 UTC

Reset all
  1. CVE-2026-119919

    Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  2. CVE-2026-119912

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.7 MEDIUM No fix listed
  3. CVE-2026-119908

    Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  4. CVE-2026-119898

    Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  5. CVE-2026-119900

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.3 HIGH No fix listed
  6. CVE-2026-119901

    Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.4 MEDIUM No fix listed
  7. CVE-2026-119889

    Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  8. CVE-2026-119890

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel

    5.3 MEDIUM No fix listed
  9. CVE-2026-119894

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  10. CVE-2026-119895

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  11. CVE-2026-119884

    Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  12. CVE-2026-119885

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  13. CVE-2026-119887

    Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  14. CVE-2026-119888

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  15. CVE-2026-119876

    Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  16. CVE-2026-119880

    Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  17. CVE-2026-119881

    Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  18. CVE-2026-119871

    Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.4 MEDIUM No fix listed
  19. CVE-2026-119872

    Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.4 MEDIUM No fix listed
  20. CVE-2026-119873

    Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  21. CVE-2026-119874

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  22. CVE-2026-119866

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  23. CVE-2026-119869

    Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.4 MEDIUM No fix listed
  24. CVE-2026-119859

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  25. CVE-2026-119860

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  26. CVE-2026-119861

    Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  27. CVE-2026-119862

    Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  28. CVE-2026-119855

    Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  29. CVE-2026-119857

    Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  30. CVE-2026-119858

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  31. CVE-2026-119848

    Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel

    5.3 MEDIUM No fix listed
  32. CVE-2026-119849

    Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  33. CVE-2026-119840

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.3 MEDIUM No fix listed
  34. CVE-2026-119844

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  35. CVE-2026-119846

    Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  36. CVE-2026-119847

    Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  37. CVE-2026-119838

    Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed
  38. CVE-2026-119834

    Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  39. CVE-2026-119835

    Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  40. CVE-2026-119836

    Use after free in Windows Management Services allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed
  41. CVE-2026-119837

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  42. CVE-2026-119829

    Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  43. CVE-2026-119830

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  44. CVE-2026-119831

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  45. CVE-2026-119823

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  46. CVE-2026-119825

    Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  47. CVE-2026-119826

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  48. CVE-2026-119816

    Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  49. CVE-2026-119817

    Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  50. CVE-2026-119401

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed