The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119944: Microsoft: Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges…7.5 HighN/AN/ANov 10, 2026
CVE-2026-119943: Microsoft: Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-119942: Microsoft: Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-119941: Microsoft: Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-119940: Microsoft: Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-119939: Microsoft: Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-119938: Microsoft: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-119937: Microsoft: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-119936: Microsoft: Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacker to deny…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-119935: Microsoft: Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a…6.8 MediumN/AN/ANov 10, 2026
CVE-2026-119934: Microsoft: Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-119933: Microsoft: Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-119932: Microsoft: Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-119931: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to…7.0 HighN/AN/ANov 10, 2026
CVE-2026-119929: Microsoft: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-119928: Microsoft: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-119925: Microsoft: Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.8.8 HighN/AN/ANov 10, 2026
CVE-2026-119921: Microsoft: Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-119919: Microsoft: Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-119918: Microsoft: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.6.8 MediumN/AN/ANov 10, 2026
CVE-2026-119917: Microsoft: Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-119916: Microsoft: Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.8.8 HighN/AN/ANov 10, 2026
CVE-2026-119914: Microsoft: Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an…6.7 MediumN/AN/ANov 10, 2026
CVE-2026-119913: Microsoft: Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized…7.0 HighN/AN/ANov 10, 2026
CVE-2026-119912: Microsoft: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.6.7 MediumN/AN/ANov 10, 2026
926-950 of 511254