The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96156: Microsoft: Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96155: Microsoft: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96153: Microsoft: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96139: Microsoft: Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96127: Microsoft: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96124: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96122: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96110: Microsoft: Use after free in Windows OLE allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96107: Microsoft: Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96103: Microsoft: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96097: Microsoft: Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96093: Microsoft: Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96092: Microsoft: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-96088: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96086: Microsoft: Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96076: Microsoft: Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96075: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96074: Microsoft: Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96073: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96067: Microsoft: Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96061: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96060: Microsoft: Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96057: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96055: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96051: Microsoft: Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
651-675 of 511254