Whitehat SecurityTM · Trademark pending

Today's vulnerabilities

Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.

  • Auto-updated hourly · last updated 11/14/2026, 09:35
  • 119 total
  • 50 exploited
  • Critical 83
  • High 36
  • Exploited in the wildCriticalWindowskev:CVE-2026-124194

    Microsoft Office (CVE-2026-124194)

    A vulnerability in Microsoft Office (CVE-2026-124194) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Microsoft Office (CVE-2026-124194)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • IncidentCriticalWindowssecurityweek:3f537e91

    In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

    A vulnerability in In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach has been disclosed. Check the vendor's advisory and update.

    Affects
    In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach
    Published
    2026-11-13

    Source · securityweek.com

  • Critical · CVSS 9.8Windowsnvd:CVE-2026-112967

    Windows Xbox Live Networking Service (CVE-2026-112967) [CVSS 9.8]

    A vulnerability in Windows Xbox Live Networking Service (CVE-2026-112967) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    Windows Xbox Live Networking Service (CVE-2026-112967) [CVSS 9.8]
    Published
    2026-11-10

    Source · NVD

  • High · CVSS 8.8Windowsnvd:CVE-2026-119916

    Windows Input System (CVE-2026-119916) [CVSS 8.8]

    A vulnerability in Windows Input System (CVE-2026-119916) [CVSS 8.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    Windows Input System (CVE-2026-119916) [CVSS 8.8]
    Published
    2026-11-10

    Source · NVD

  • High · CVSS 8.8Windowsnvd:CVE-2026-119950

    Windows Print Spooler Components (CVE-2026-119950) [CVSS 8.8]

    A vulnerability in Windows Print Spooler Components (CVE-2026-119950) [CVSS 8.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    Windows Print Spooler Components (CVE-2026-119950) [CVSS 8.8]
    Published
    2026-11-10

    Source · NVD

  • IncidentCriticalWindowskrebs:ede82849

    Microsoft Fixes Nearly 1,100 Security Vulnerabilities

    A vulnerability in Microsoft Fixes Nearly 1,100 Security Vulnerabilities has been disclosed. Check the vendor's advisory and update.

    Affects
    Microsoft Fixes Nearly 1,100 Security Vulnerabilities
    Published
    2026-11-10

    Source · krebsonsecurity.com

  • Exploited in the wildCriticalWindowskev:CVE-2026-96951

    Microsoft Windows (CVE-2026-96951)

    A vulnerability in Microsoft Windows (CVE-2026-96951) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Microsoft Windows (CVE-2026-96951)
    Published
    2026-10-13
    US federal due date
    2026-10-16

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalWindowskev:CVE-2021-3199

    ONLYOFFICE Docs (CVE-2021-3199)

    A vulnerability in ONLYOFFICE Docs (CVE-2021-3199) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    ONLYOFFICE Docs (CVE-2021-3199)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

Is your site affected?

Tell us your stack and we will tell you whether it applies and what to do first.

1:1 security consultation on TelegramSecurity check pricingRead the Security blog