The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96845: Microsoft: Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96184: Microsoft: Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96179: Microsoft: Use after free in DNS Server allows an authorized attacker to elevate privileges locally.6.7 MediumN/AN/ANov 10, 2026
CVE-2026-96176: Microsoft: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over…7.5 HighN/AN/ANov 10, 2026
CVE-2026-96175: Microsoft: Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96174: Microsoft: Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96172: Microsoft: No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96171: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96168: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96162: Microsoft: Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96160: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96158: Microsoft: Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96157: Microsoft: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96156: Microsoft: Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96155: Microsoft: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96153: Microsoft: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96152: Microsoft: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96150: Microsoft: Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information…5.6 MediumN/AN/ANov 10, 2026
CVE-2026-96144: Microsoft: Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96139: Microsoft: Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96137: Microsoft: Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96134: Microsoft: Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-96133: Microsoft: Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96129: Microsoft: Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96127: Microsoft: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
601-625 of 427654