The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-69958: Microsoft: Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical…6.8 MediumN/A0%Oct 13, 2026
CVE-2026-69957: Microsoft: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69954: Microsoft: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.5.5 MediumN/A0%Oct 13, 2026
CVE-2026-69953: Microsoft: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69952: Microsoft: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69950: Microsoft: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69947: Microsoft: Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical…6.8 MediumN/A0%Oct 13, 2026
CVE-2026-69945: Microsoft: Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.8.8 HighN/A0%Oct 13, 2026
CVE-2026-69942: Microsoft: Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69935: Microsoft: Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.7.0 HighN/A0%Oct 13, 2026
CVE-2026-69931: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows…7.0 HighN/A0%Oct 13, 2026
CVE-2026-69926: Microsoft: Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker…7.8 HighN/A0%Oct 13, 2026
CVE-2026-69922: Microsoft: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.6.5 MediumN/A1%Oct 13, 2026
CVE-2026-69918: Microsoft: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.8.8 HighN/A0%Oct 13, 2026
CVE-2026-69914: Microsoft: Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.5.5 MediumN/A0%Oct 13, 2026
CVE-2026-69913: Microsoft: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.8.1 HighN/A1%Oct 13, 2026
CVE-2026-69909: Microsoft: Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69905: Microsoft: Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.5.5 MediumN/A0%Oct 13, 2026
CVE-2026-69898: Microsoft: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69883: Microsoft: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.9.8 CriticalN/A1%Oct 13, 2026
CVE-2026-69867: Microsoft: Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69856: Microsoft: Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.7.0 HighN/A0%Oct 13, 2026
CVE-2026-69850: Microsoft: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-69840: Microsoft: Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.7.0 HighN/A0%Oct 13, 2026
CVE-2026-69795: Microsoft: Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.7.0 HighN/A0%Oct 13, 2026
976-1000 of 401338
‹›