CVE-20XX-?
agent?

The internet is broken right now.

96 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 34 more already have a fix that someone still has to apply.

4,426 CVEs · updated 2026-11-11 20:02 UTC

Reset all
  1. CVE-2026-110054

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  2. CVE-2026-110047

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  3. CVE-2026-110048

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  4. CVE-2026-110049

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    Memory safety

    7.8 HIGH No fix listed
  5. CVE-2026-109505

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  6. CVE-2026-110043

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  7. CVE-2026-109500

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    7.5 HIGH No fix listed
  8. CVE-2026-109501

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  9. CVE-2026-109503

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  10. CVE-2026-109493

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  11. CVE-2026-109494

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  12. CVE-2026-109496

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

    Memory safety

    8.8 HIGH No fix listed
  13. CVE-2026-109498

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Memory safety

    7.5 HIGH No fix listed
  14. CVE-2026-109499

    Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Memory safety Server

    8.8 HIGH No fix listed
  15. CVE-2026-109487

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    Memory safety

    7.5 HIGH No fix listed
  16. CVE-2026-109491

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Memory safety

    7.5 HIGH No fix listed
  17. CVE-2026-109475

    Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

    Memory safety

    7.5 HIGH No fix listed
  18. CVE-2026-109473

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  19. CVE-2026-109459

    Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.1 HIGH No fix listed
  20. CVE-2026-108419

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  21. CVE-2026-108424

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  22. CVE-2026-108421

    Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  23. CVE-2026-108423

    Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    4.7 MEDIUM No fix listed
  24. CVE-2026-108425

    Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    5.9 MEDIUM No fix listed
  25. CVE-2026-108414

    Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  26. CVE-2026-108417

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  27. CVE-2026-108418

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  28. CVE-2026-108411

    Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  29. CVE-2026-108412

    Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  30. CVE-2026-108413

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  31. CVE-2026-108408

    Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  32. CVE-2026-108410

    Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

    Memory safety OS & kernel

    5.5 MEDIUM No fix listed
  33. CVE-2026-108405

    Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  34. CVE-2026-108406

    Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  35. CVE-2026-108407

    Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  36. CVE-2026-108404

    Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.

    Memory safety OS & kernel

    6.8 MEDIUM No fix listed
  37. CVE-2026-108403

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  38. CVE-2026-105589

    Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  39. CVE-2026-108401

    Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  40. CVE-2026-105586

    Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  41. CVE-2026-105587

    Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  42. CVE-2026-105575

    Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  43. CVE-2026-105578

    Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  44. CVE-2026-105579

    Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel

    7.5 HIGH No fix listed
  45. CVE-2026-105580

    Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed
  46. CVE-2026-105581

    Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    8.8 HIGH No fix listed
  47. CVE-2026-105565

    Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  48. CVE-2026-105567

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.0 HIGH No fix listed
  49. CVE-2026-105568

    Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

    Memory safety OS & kernel

    6.5 MEDIUM No fix listed
  50. CVE-2026-105569

    Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

    Memory safety OS & kernel

    7.8 HIGH No fix listed