The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105726: Microsoft Microsoft Defender for Endpoint for Windows: Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.5.5 MediumN/AN/AOct 13, 2026
CVE-2026-105725: Microsoft Windows Security App: Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-105723: Microsoft: Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate…7.5 HighN/AN/AOct 13, 2026
CVE-2026-105722: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-105720: Microsoft Microsoft SharePoint Server Subscription Edition: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a…4.3 MediumN/AN/AOct 13, 2026
CVE-2026-105719: Microsoft Microsoft SharePoint Server Subscription Edition: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a…6.5 MediumN/AN/AOct 13, 2026
CVE-2026-105718: Microsoft: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105717: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105716: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105715: Microsoft: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-105714: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-105713: Microsoft Microsoft SharePoint Server Subscription Edition: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing…5.7 MediumN/AN/AOct 13, 2026
CVE-2026-105599: Microsoft: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a…7.5 HighN/AN/AOct 13, 2026
CVE-2026-105598: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105597: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105596: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105595: Microsoft: Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105593: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105592: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-105591: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-105016: Microsoft: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-105010: Microsoft: Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a…9.8 CriticalN/AN/AOct 13, 2026
CVE-2026-105003: Microsoft: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 13, 2026
CVE-2026-104937: Shopware: Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective…N/AN/AN/AOct 13, 2026
CVE-2026-104875: ente: Ente provides end-to-end encrypted cloud services and security tools7.1 HighN/AN/AOct 13, 2026
901-925 of 511130
‹›