The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96043: Microsoft: Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96042: Microsoft: Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96041: Microsoft: Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96038: Microsoft: Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96037: Microsoft: Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96036: Microsoft: Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96035: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96031: Microsoft: Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96029: Microsoft: Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96028: Microsoft: Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96027: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96026: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96023: Microsoft: Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96022: Microsoft: Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information…5.6 MediumN/AN/ANov 10, 2026
CVE-2026-96019: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96018: Microsoft: Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96017: Microsoft: Use after free in DNS Server allows an authorized attacker to deny service over a network.4.9 MediumN/AN/ANov 10, 2026
CVE-2026-96016: Microsoft: Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96010: Microsoft: Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a…8.8 HighN/AN/ANov 10, 2026
CVE-2026-96008: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96007: Microsoft: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96005: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96004: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96001: Microsoft: Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95999: Microsoft: Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
651-675 of 557027