The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96067: Microsoft: Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96066: Microsoft: Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96062: Microsoft: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96061: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96060: Microsoft: Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96059: Microsoft: Use after free in HID class driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96058: Microsoft: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.4.6 MediumN/AN/ANov 10, 2026
CVE-2026-96057: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96056: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96055: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96053: Microsoft: Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96052: Microsoft: Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96051: Microsoft: Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96048: Microsoft: Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96047: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96046: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96043: Microsoft: Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96042: Microsoft: Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96041: Microsoft: Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96038: Microsoft: Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96037: Microsoft: Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96036: Microsoft: Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96035: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96031: Microsoft: Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96029: Microsoft: Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
651-675 of 426048