The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-95922: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95920: Microsoft: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-95913: Microsoft: Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.5.9 MediumN/AN/ANov 10, 2026
CVE-2026-95910: Microsoft: Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.6.7 MediumN/AN/ANov 10, 2026
CVE-2026-95909: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95908: Microsoft: Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95906: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95905: Microsoft: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-95902: Microsoft: Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95901: Microsoft: Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-95898: Microsoft: Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95895: Microsoft: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95894: Microsoft: Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95893: Microsoft: Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-95889: Microsoft: Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-95888: Microsoft: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95885: Microsoft: Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-95884: Microsoft: Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-95882: Microsoft: Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-95881: Microsoft: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95879: Microsoft: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95877: Microsoft: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95876: Microsoft: Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-95874: Microsoft: Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-95872: Microsoft: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
726-750 of 420828