The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-70161: Microsoft: Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to…7.3 HighN/AN/AOct 13, 2026
CVE-2026-70159: Microsoft: Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70156: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70155: Microsoft: Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70153: Microsoft: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-70150: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70147: Microsoft: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-70144: Microsoft: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70142: Microsoft: Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70141: Microsoft: Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.5.5 MediumN/AN/AOct 13, 2026
CVE-2026-70140: Microsoft: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70139: Microsoft: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70138: Microsoft: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70136: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70135: Microsoft: Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/AOct 13, 2026
CVE-2026-70133: Microsoft: Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny…7.5 HighN/AN/AOct 13, 2026
CVE-2026-70132: Microsoft: Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate…7.8 HighN/AN/AOct 13, 2026
CVE-2026-70127: Microsoft: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/AOct 13, 2026
CVE-2026-70126: Microsoft: Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent…7.1 HighN/AN/AOct 13, 2026
CVE-2026-70123: Microsoft: Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70121: Microsoft: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-70119: Microsoft: Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-70118: Microsoft: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-70117: Microsoft: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges…7.8 HighN/AN/AOct 13, 2026
CVE-2026-70115: Microsoft: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
701-725 of 541230
‹›