The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123389: Microsoft: Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-123388: Microsoft: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-123387: Microsoft: Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows…8.0 HighN/AN/ANov 10, 2026
CVE-2026-123385: Microsoft: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123384: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123383: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123382: Microsoft: Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a…8.8 HighN/AN/ANov 10, 2026
CVE-2026-123381: Microsoft: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123380: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123379: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-123378: Microsoft: Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-123377: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123376: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-123375: Microsoft: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-122988: Microsoft Windows Admin Center: Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.8.0 HighN/AN/ANov 10, 2026
CVE-2026-122987: Microsoft: Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-122986: Microsoft kernel-mshv-6.6.137.mshv2-2.azl3.x86_64: Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-122985: Microsoft: Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to…6.1 MediumN/AN/ANov 10, 2026
CVE-2026-122984: Microsoft: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
CVE-2026-122979: Microsoft Microsoft Teams for Android: Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized…8.1 HighN/AN/ANov 10, 2026
CVE-2026-122518: Microsoft Microsoft Edge (Chromium-based): Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-122475: Microsoft: Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over…8.8 HighN/AN/ANov 10, 2026
CVE-2026-122474: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-122297: Microsoft: Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-122198: Microsoft: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
776-800 of 557027