The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-120778: Microsoft Aspire.Cli: Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to…7.3 HighN/AN/ANov 10, 2026
CVE-2026-120006: Microsoft: Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges…7.5 HighN/AN/ANov 10, 2026
CVE-2026-120005: Microsoft: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a…8.8 HighN/AN/ANov 10, 2026
CVE-2026-120003: Microsoft: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-120002: Microsoft Microsoft SharePoint Server Subscription Edition: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-120001: Microsoft: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a…8.8 HighN/AN/ANov 10, 2026
CVE-2026-120000: Microsoft Microsoft SharePoint Server Subscription Edition: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-119999: Microsoft: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-119998: Microsoft: Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-119997: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-119996: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-119995: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-119993: Microsoft: Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-119992: Microsoft: Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-119991: Microsoft Microsoft Configuration Manager 2603: Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-119990: Microsoft Azure Open AI: Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-119989: Microsoft Azure Web Apps: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an…8.2 HighN/AN/ANov 10, 2026
CVE-2026-119988: Microsoft: Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.7.1 HighN/AN/ANov 10, 2026
CVE-2026-119987: Microsoft: Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-119986: Microsoft: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-119985: Microsoft Visual Studio Code: Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.8.3 HighN/AN/ANov 10, 2026
CVE-2026-119983: Microsoft Visual Studio Code: Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature…8.8 HighN/AN/ANov 10, 2026
CVE-2026-119982: Microsoft Visual Studio Code: Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-119981: Microsoft Visual Studio Code: Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-119976: Microsoft Visual Studio Code: External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an…6.5 MediumN/AN/ANov 10, 2026
851-875 of 557027