The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-112720: Microsoft: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112719: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-112718: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-112717: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-112716: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-112715: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-112714: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111310: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111309: Microsoft: Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code…8.8 HighN/AN/ANov 10, 2026
CVE-2026-111308: Microsoft: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111307: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111306: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111305: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111304: Microsoft: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111303: Microsoft Microsoft SharePoint Server Subscription Edition: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint…7.3 HighN/AN/ANov 10, 2026
CVE-2026-111302: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-111301: Microsoft: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111300: Microsoft Microsoft SharePoint Server Subscription Edition: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint…7.3 HighN/AN/ANov 10, 2026
CVE-2026-111299: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111298: Microsoft: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111297: Microsoft Microsoft SharePoint Server Subscription Edition: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint…8.0 HighN/AN/ANov 10, 2026
CVE-2026-111296: Microsoft Microsoft SharePoint Server Subscription Edition: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges…8.0 HighN/AN/ANov 10, 2026
CVE-2026-111295: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111294: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-111293: Microsoft: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.6.5 MediumN/AN/ANov 10, 2026
1151-1175 of 511254
‹›