The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96133: Microsoft: Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96129: Microsoft: Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-96127: Microsoft: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96126: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96124: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96122: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96117: Microsoft: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96115: Microsoft: Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.8.0 HighN/AN/ANov 10, 2026
CVE-2026-96112: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96110: Microsoft: Use after free in Windows OLE allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96107: Microsoft: Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96103: Microsoft: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96102: Microsoft: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96101: Microsoft: Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-96097: Microsoft: Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96093: Microsoft: Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-96092: Microsoft: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-96088: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96086: Microsoft: Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96085: Microsoft: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96084: Microsoft: Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96082: Microsoft: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-96081: Microsoft: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-96078: Microsoft: Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-96077: Microsoft: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
676-700 of 511254