The internet is broken right now.
94 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 35 more already have a fix that someone still has to apply.
-
CVE-2026-119919
Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119912
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119908
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
CVE-2026-119898
Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119900
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119901
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119889
Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119890
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.
-
CVE-2026-119894
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119895
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119884
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119885
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119887
Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119888
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119876
Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119880
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
-
CVE-2026-119881
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-119871
Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119872
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119873
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119874
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119866
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119869
Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119859
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119860
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119861
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119862
Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119855
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
-
CVE-2026-119857
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
-
CVE-2026-119858
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
CVE-2026-119848
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.
-
CVE-2026-119849
Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
-
CVE-2026-119840
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119844
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119846
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119847
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119838
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
CVE-2026-119834
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119835
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119836
Use after free in Windows Management Services allows an authorized attacker to disclose information locally.
-
CVE-2026-119837
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119829
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119830
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119831
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119823
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.
-
CVE-2026-119825
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
-
CVE-2026-119826
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119816
Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119817
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119401
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.