The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121530: Fortinet FortiOS: A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-95404: Google Android: In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure…N/AN/AN/ANov 10, 2026
CVE-2026-95399: Google Android: In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared…N/AN/AN/ANov 10, 2026
CVE-2026-99288: Linux: In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established…N/AN/AN/ANov 10, 2026
CVE-2026-99287: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: Zero out sring pointers on unmap If…N/AN/AN/ANov 10, 2026
CVE-2026-99286: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup…N/AN/AN/ANov 10, 2026
CVE-2026-97015: Microsoft: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-97013: Microsoft: Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-97006: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-97002: Microsoft: Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.7.5 HighN/AN/ANov 10, 2026
CVE-2026-97000: Microsoft: Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96994: Microsoft: Use after free in Winsock allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96992: Microsoft: Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.6.4 MediumN/AN/ANov 10, 2026
CVE-2026-96989: Microsoft: Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96988: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96987: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96986: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96985: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96984: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96983: Microsoft: Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.5.3 MediumN/AN/ANov 10, 2026
CVE-2026-96982: Microsoft: Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-96981: Microsoft: Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-96980: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96979: Microsoft: Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-96978: Microsoft: Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
476-500 of 557027