The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96115: Microsoft: Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.8.0 HighN/AN/ANov 10, 2026
CVE-2026-96112: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96110: Microsoft: Use after free in Windows OLE allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96107: Microsoft: Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96103: Microsoft: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96102: Microsoft: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96101: Microsoft: Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96097: Microsoft: Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96093: Microsoft: Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96092: Microsoft: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-96088: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96086: Microsoft: Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96085: Microsoft: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96084: Microsoft: Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96082: Microsoft: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96081: Microsoft: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-96078: Microsoft: Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96077: Microsoft: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-96076: Microsoft: Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96075: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96074: Microsoft: Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96073: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96072: Microsoft: Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96067: Microsoft: Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96066: Microsoft: Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
501-525 of 557027