The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-105528: Microsoft: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-105527: Microsoft: Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-105526: Microsoft: Double free in Winsock allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105525: Microsoft: Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105524: Microsoft: Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-105522: Microsoft: Use after free in Winlogon allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105520: Microsoft: Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate…7.2 HighN/AN/ANov 10, 2026
CVE-2026-105518: Microsoft: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-105515: Microsoft: Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105513: Microsoft: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory7.0 HighN/AN/ANov 10, 2026
CVE-2026-105512: Microsoft: Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105510: Microsoft: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105507: Microsoft: An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly…7.8 HighN/AN/ANov 10, 2026
CVE-2026-105506: Microsoft: Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.5.0 MediumN/AN/ANov 10, 2026
CVE-2026-105505: Microsoft: Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-105504: Microsoft: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory7.0 HighN/AN/ANov 10, 2026
CVE-2026-105503: Microsoft: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-105501: Microsoft: Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-105499: Microsoft: Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges…8.8 HighN/AN/ANov 10, 2026
CVE-2026-105498: Microsoft: Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-105497: Microsoft: Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-105496: Microsoft: Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.8.8 HighN/AN/ANov 10, 2026
CVE-2026-105495: Microsoft: Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-105493: Microsoft: Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-105492: Microsoft: Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.5.3 MediumN/AN/ANov 10, 2026
1226-1250 of 557027
‹

Refine your search or filters to see more results.