CVE-20XX-?
agent?

The internet is broken right now.

96 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 34 more already have a fix that someone still has to apply.

4,424 CVEs · updated 2026-11-11 19:47 UTC

Reset all
  1. CVE-2026-116718

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    7.5 HIGH No fix listed
  2. CVE-2026-116719

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  3. CVE-2026-116717

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  4. CVE-2026-116710

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.1 HIGH No fix listed
  5. CVE-2026-116706

    Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  6. CVE-2026-116707

    Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  7. CVE-2026-116697

    Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.

    Memory safety OS & kernel

    5.9 MEDIUM No fix listed
  8. CVE-2026-116698

    Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  9. CVE-2026-116699

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  10. CVE-2026-116700

    Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.6 MEDIUM No fix listed
  11. CVE-2026-114165

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  12. CVE-2026-114166

    Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  13. CVE-2026-114167

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  14. CVE-2026-114169

    Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  15. CVE-2026-114170

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  16. CVE-2026-114164

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  17. CVE-2026-114158

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  18. CVE-2026-114159

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  19. CVE-2026-114150

    Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

    Memory safety

    5.9 MEDIUM No fix listed
  20. CVE-2026-114152

    Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  21. CVE-2026-113863

    Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  22. CVE-2026-113864

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    6.4 MEDIUM No fix listed
  23. CVE-2026-113855

    Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  24. CVE-2026-113856

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  25. CVE-2026-113859

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  26. CVE-2026-113860

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  27. CVE-2026-113861

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  28. CVE-2026-113862

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.1 HIGH No fix listed
  29. CVE-2026-113842

    Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  30. CVE-2026-113847

    Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  31. CVE-2026-113848

    Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  32. CVE-2026-113820

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  33. CVE-2026-113821

    Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.1 MEDIUM No fix listed
  34. CVE-2026-113817

    Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.

    Memory safety OS & kernel

    6.6 MEDIUM No fix listed
  35. CVE-2026-113819

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  36. CVE-2026-113816

    Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    4.1 MEDIUM No fix listed
  37. CVE-2026-113768

    Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  38. CVE-2026-113769

    Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  39. CVE-2026-113762

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  40. CVE-2026-113765

    Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  41. CVE-2026-113758

    Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  42. CVE-2026-113759

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    Memory safety

    7.8 HIGH No fix listed
  43. CVE-2026-113760

    Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  44. CVE-2026-113752

    Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  45. CVE-2026-113755

    Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  46. CVE-2026-113748

    Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  47. CVE-2026-113749

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  48. CVE-2026-113750

    Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  49. CVE-2026-112987

    Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  50. CVE-2026-112990

    Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed