The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-95977: Microsoft: Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95976: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic…7.0 HighN/AN/ANov 10, 2026
CVE-2026-95974: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95973: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95971: Microsoft: Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95968: Microsoft: Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95966: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95965: Microsoft: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95963: Microsoft: Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized…7.8 HighN/AN/ANov 10, 2026
CVE-2026-95961: Microsoft: Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95960: Microsoft: Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an…8.8 HighN/AN/ANov 10, 2026
CVE-2026-95953: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95951: Microsoft: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95950: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95948: Microsoft: Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95947: Microsoft: An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files7.8 HighN/AN/ANov 10, 2026
CVE-2026-95946: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95944: Microsoft: Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95942: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95938: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95935: Microsoft: Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95934: Microsoft: Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95933: Microsoft: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95932: Microsoft: Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-95923: Microsoft: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
701-725 of 426048