The internet is broken right now.
96 critical CVEs without a fix in the last 48 hours. Developers are crying quietly into their IDEs. 34 more already have a fix that someone still has to apply.
-
CVE-2026-112990
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112980
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112981
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112984
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-112985
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112976
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112978
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112968
Use after free in Windows COM allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112969
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.
-
CVE-2026-112970
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112971
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112972
Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.
-
CVE-2026-112814
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112965
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
CVE-2026-112967
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112811
Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112812
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112807
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.
-
CVE-2026-112804
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112799
Stack-based buffer overflow in Windows Projected File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112800
Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112793
Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-112794
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112796
Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112797
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112798
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112766
Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112790
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112792
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112761
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112763
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112764
Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112765
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112759
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112760
Integer overflow or wraparound in Windows Overlay Filter allows an unauthorized attacker to elevate privileges locally.
-
CVE-2026-112758
Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112754
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
-
CVE-2026-112755
Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.
-
CVE-2026-112756
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112751
Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112752
Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112753
Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-112737
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112738
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-112739
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112741
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112730
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112731
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-112733
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112734
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.