The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-105579: Microsoft: Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105578: Microsoft: Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105575: Microsoft: Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker…7.8 HighN/AN/ANov 10, 2026
CVE-2026-105574: Microsoft: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105569: Microsoft: Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-105566: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105565: Microsoft: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105560: Microsoft: Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a…7.2 HighN/AN/ANov 10, 2026
CVE-2026-105559: Microsoft: No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-105558: Microsoft: Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105557: Microsoft: Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-105553: Microsoft: Stack-based buffer overflow in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105552: Microsoft: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory5.5 MediumN/AN/ANov 10, 2026
CVE-2026-105551: Microsoft: Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-105549: Microsoft: Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.4.3 MediumN/AN/ANov 10, 2026
CVE-2026-105547: Microsoft: Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105546: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105545: Microsoft: An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105543: Microsoft: Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-105542: Microsoft: Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-105541: Microsoft: Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-105540: Microsoft: Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-105537: Microsoft: Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-105533: Microsoft: Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105532: Microsoft: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to…7.8 HighN/AN/ANov 10, 2026
1226-1250 of 511254
‹

Refine your search or filters to see more results.