The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96987: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96986: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96985: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96984: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96983: Microsoft: Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.5.3 MediumN/AN/ANov 10, 2026
CVE-2026-96982: Microsoft: Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-96981: Microsoft: Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-96980: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96979: Microsoft: Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-96978: Microsoft: Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96976: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96975: Microsoft: Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.5.9 MediumN/AN/ANov 10, 2026
CVE-2026-96974: Microsoft: Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-96973: Microsoft: Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96972: Microsoft: Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-96971: Microsoft: Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96970: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96969: Microsoft: Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96965: Microsoft: Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.5.3 MediumN/AN/ANov 10, 2026
CVE-2026-96845: Microsoft: Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96184: Microsoft: Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96179: Microsoft: Use after free in DNS Server allows an authorized attacker to elevate privileges locally.6.7 MediumN/AN/ANov 10, 2026
CVE-2026-96177: Microsoft: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-96176: Microsoft: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over…7.5 HighN/AN/ANov 10, 2026
CVE-2026-96175: Microsoft: Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
451-475 of 557027