The internet is broken right now.
96 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 34 more already have a fix that someone still has to apply.
-
CVE-2026-116718
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116719
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116717
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116710
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116706
Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-116707
Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.
-
CVE-2026-116697
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-116698
Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116699
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116700
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-114165
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
-
CVE-2026-114166
Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.
-
CVE-2026-114167
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
-
CVE-2026-114169
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
-
CVE-2026-114170
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-114164
Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
CVE-2026-114158
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-114159
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-114150
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-114152
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-113863
Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.
-
CVE-2026-113864
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113855
Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-113856
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113859
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-113860
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113861
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113862
Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-113842
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113847
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113848
Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.
-
CVE-2026-113820
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113821
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.
-
CVE-2026-113817
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-113819
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113816
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113768
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.
-
CVE-2026-113769
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113762
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113765
Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113758
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113759
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
CVE-2026-113760
Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113752
Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-113755
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113748
Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-113749
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
CVE-2026-113750
Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112987
Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112990
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.