The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-96008: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96007: Microsoft: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-96005: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-96004: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-96001: Microsoft: Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95999: Microsoft: Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95998: Microsoft: Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform…4.4 MediumN/AN/ANov 10, 2026
CVE-2026-95997: Microsoft: Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95996: Microsoft: Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-95991: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95989: Microsoft: Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95988: Microsoft: Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95987: Microsoft: Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95983: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95979: Microsoft: Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95977: Microsoft: Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95976: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic…7.0 HighN/AN/ANov 10, 2026
CVE-2026-95974: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95973: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95971: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95968: Microsoft: Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95966: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95965: Microsoft: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95963: Microsoft: Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized…7.8 HighN/AN/ANov 10, 2026
CVE-2026-95961: Microsoft: Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
676-700 of 557027