The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-95692: OpenSSL: Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVP_CipherInit_ex() may trigger a…N/AN/AN/ANov 10, 2026
CVE-2026-95691: OpenSSL: Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage while the TLS record layer retains a direct…N/AN/AN/ANov 10, 2026
CVE-2026-94531: Microsoft: Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-94529: Microsoft: Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-94527: Microsoft: Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-94522: Microsoft: Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-94519: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-94515: Microsoft: Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-94514: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an…7.0 HighN/AN/ANov 10, 2026
CVE-2026-94507: Microsoft: Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88823: OpenSSL: Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional Authenticated Data (AAD) update as a…N/AN/AN/ANov 10, 2026
CVE-2026-88822: OpenSSL: Issue summary: QUIC, when performing automated peer detection, may allow uninitialized stack data to leak into the…N/AN/AN/ANov 10, 2026
CVE-2026-88245: Microsoft: Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-88242: Microsoft: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-88241: Microsoft: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88239: Microsoft: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88238: Microsoft: Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-88237: Microsoft: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-88235: Microsoft: Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-88233: Microsoft: Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88232: Microsoft: Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88230: Microsoft: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-88228: Microsoft: Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.0 HighN/AN/ANov 10, 2026
CVE-2026-88227: Microsoft: Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
CVE-2026-88224: Microsoft: Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized…7.0 HighN/AN/ANov 10, 2026
576-600 of 557027