The internet is broken right now.
96 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 35 more already have a fix that someone still has to apply.
-
CVE-2026-118703
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118296
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118297
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118298
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118299
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118300
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-118301
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118302
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118283
Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118292
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118293
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118294
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118295
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118229
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118232
Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118277
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118278
Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118279
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118280
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118224
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118226
Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118227
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118228
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118219
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118220
Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118221
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118222
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118223
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118214
Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.
-
CVE-2026-118215
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118216
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118217
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118218
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118142
Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118143
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-118144
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-118145
Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-118141
Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118124
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118125
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
-
CVE-2026-118126
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
-
CVE-2026-116947
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-118103
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-118104
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-118106
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116941
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-116942
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-116943
Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-116944
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-116945
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.