The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-70197: Microsoft: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/AOct 13, 2026
CVE-2026-70196: Microsoft: Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.5.9 MediumN/AN/AOct 13, 2026
CVE-2026-70190: Microsoft: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…7.3 HighN/AN/AOct 13, 2026
CVE-2026-70188: Microsoft: Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-70186: Microsoft: Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-70185: Microsoft: Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.8.8 HighN/AN/AOct 13, 2026
CVE-2026-70183: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70181: Microsoft: Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70179: Microsoft: Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-70176: Microsoft: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70175: Microsoft: Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.8.1 HighN/AN/AOct 13, 2026
CVE-2026-70174: Microsoft: Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 13, 2026
CVE-2026-70165: Microsoft: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…6.7 MediumN/AN/AOct 13, 2026
CVE-2026-70164: Microsoft: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70162: Microsoft: A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests5.9 MediumN/AN/AOct 13, 2026
CVE-2026-70161: Microsoft: Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to…7.3 HighN/AN/AOct 13, 2026
CVE-2026-70159: Microsoft: Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70156: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70155: Microsoft: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70153: Microsoft: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-70150: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70147: Microsoft: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-70144: Microsoft: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70142: Microsoft: Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70141: Microsoft: Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.5.5 MediumN/AN/AOct 13, 2026
676-700 of 541230
‹›