The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113755: Microsoft: Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113754: Microsoft: Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113753: Microsoft Windows 11 version 26H1: Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.8.2 HighN/AN/ANov 10, 2026
CVE-2026-113752: Microsoft: Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113751: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver…7.0 HighN/AN/ANov 10, 2026
CVE-2026-113750: Microsoft: Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113749: Microsoft: Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113748: Microsoft: Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-112990: Microsoft: Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-112989: Microsoft: Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112988: Microsoft: Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112987: Microsoft: Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-112986: Microsoft: No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112985: Microsoft: Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-112984: Microsoft: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-112982: Microsoft: Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112981: Microsoft: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-112980: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6.7 MediumN/AN/ANov 10, 2026
CVE-2026-112979: Microsoft: Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112978: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-112977: Microsoft: Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112976: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112975: Microsoft: Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-112974: Microsoft: Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112973: Microsoft: Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.7.1 HighN/AN/ANov 10, 2026
1176-1200 of 557027