The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-116721: Microsoft: Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-116720: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-116719: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-116718: Microsoft: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-116717: Microsoft: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-116714: Microsoft: Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-116710: Microsoft: Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.8.1 HighN/AN/ANov 10, 2026
CVE-2026-116707: Microsoft: Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-116706: Microsoft: Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over…7.5 HighN/AN/ANov 10, 2026
CVE-2026-116700: Microsoft: Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-116699: Microsoft: Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-116698: Microsoft: Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-116697: Microsoft: Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-115559: Python Software Foundation CPython: IMAP4.starttls() wraps the socket in TLS but leaves self._readbuf, imaplib's own read-ahead buffer, untouchedN/A6.3 MediumN/ANov 10, 2026
CVE-2026-114171: Microsoft Visual Studio Code: User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to…8.8 HighN/AN/ANov 10, 2026
CVE-2026-114170: Microsoft: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-114169: Microsoft Raw Image Extension: Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a…8.8 HighN/AN/ANov 10, 2026
CVE-2026-114167: Microsoft: Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-114166: Microsoft Raw Image Extension: Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-114165: Microsoft: Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-114164: Microsoft: Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute…8.8 HighN/AN/ANov 10, 2026
CVE-2026-114162: Microsoft Azure Privileged Identity Management (PIM): Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.9.1 CriticalN/AN/ANov 10, 2026
CVE-2026-114161: Microsoft Azure CycleCloud 8.9.2: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized…7.8 HighN/AN/ANov 10, 2026
CVE-2026-114159: Microsoft: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-114158: Microsoft: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
1176-1200 of 557027