The internet is broken right now.
94 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.
-
CVE-2026-119817
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119401
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119402
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119403
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119405
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119394
Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
-
CVE-2026-119395
Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.
-
CVE-2026-119397
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119399
Double free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119389
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119390
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.
-
CVE-2026-119391
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119392
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-119393
Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119383
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-119386
Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119387
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119388
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-119382
Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118745
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118727
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-118728
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-118729
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118730
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118731
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118732
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118721
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118722
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118725
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-118726
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118715
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-118716
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118717
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118718
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118719
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118720
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118709
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118710
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118711
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118712
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118713
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118714
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118704
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118705
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118706
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118707
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118700
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118701
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118702
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118703
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.