The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-96253: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-96252: Microsoft: Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-96250: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-96249: Microsoft: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-96237: Microsoft: Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a…7.5 HighN/AN/AOct 13, 2026
CVE-2026-96235: Microsoft: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-96231: Microsoft: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…7.8 HighN/AN/AOct 13, 2026
CVE-2026-96225: Microsoft: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…7.8 HighN/AN/AOct 13, 2026
CVE-2026-96224: Microsoft: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-96222: Microsoft: Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to…7.4 HighN/AN/AOct 13, 2026
CVE-2026-96219: Microsoft: Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-96113: Microsoft: Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-96108: Microsoft: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-96096: Microsoft: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-95943: Microsoft: Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-95631: Adobe: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution…8.7 HighN/AN/AOct 13, 2026
CVE-2026-95630: Adobe: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass4.3 MediumN/AN/AOct 13, 2026
CVE-2026-92922: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…8.1 HighN/AN/AOct 13, 2026
CVE-2026-92911: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…8.7 HighN/AN/AOct 13, 2026
CVE-2026-92910: Adobe: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass7.2 HighN/AN/AOct 13, 2026
CVE-2026-92909: Adobe: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-92908: Adobe: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass8.3 HighN/AN/AOct 13, 2026
CVE-2026-92464: Adobe: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-92088: upKeeper Solutions upKeeper Instant Privilege Access: Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows…N/A8.6 HighN/AOct 13, 2026
CVE-2026-91013: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to…9.3 CriticalN/AN/AOct 13, 2026
501-525 of 417606
‹›