The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96084: Microsoft: Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96082: Microsoft: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96078: Microsoft: Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96077: Microsoft: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-96076: Microsoft: Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96075: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96074: Microsoft: Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96073: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96072: Microsoft: Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96067: Microsoft: Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96066: Microsoft: Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96062: Microsoft: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96061: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96060: Microsoft: Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96059: Microsoft: Use after free in HID class driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96058: Microsoft: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.4.6 MediumN/AN/ANov 10, 2026
CVE-2026-96057: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96056: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96055: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96053: Microsoft: Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96052: Microsoft: Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96051: Microsoft: Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96048: Microsoft: Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96047: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96046: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
626-650 of 557027