The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-97823: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97822: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97821: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97820: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97819: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97817: Microsoft: Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97816: Microsoft: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-97815: Microsoft: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-97814: Microsoft: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-97813: Microsoft: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97812: Microsoft: Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-97811: Microsoft: Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97810: Microsoft: Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker…7.0 HighN/AN/AOct 13, 2026
CVE-2026-97809: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97808: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-97807: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97806: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97805: Microsoft: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-97804: Microsoft: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97803: Microsoft Windows 11 version 26H1: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-97801: Microsoft: Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering…7.5 HighN/AN/AOct 13, 2026
CVE-2026-97800: Microsoft: Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to…7.8 HighN/AN/AOct 13, 2026
CVE-2026-97799: Microsoft: Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate…7.8 HighN/AN/AOct 13, 2026
CVE-2026-97798: Microsoft: Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an…7.8 HighN/AN/AOct 13, 2026
CVE-2026-97749: Microsoft: Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
451-475 of 417606
‹›