The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113767: Microsoft: Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized…7.8 HighN/AN/ANov 10, 2026
CVE-2026-113766: Microsoft: Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.3.3 LowN/AN/ANov 10, 2026
CVE-2026-113765: Microsoft: Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-113764: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113763: Microsoft: Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface)…6.3 MediumN/AN/ANov 10, 2026
CVE-2026-113762: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113761: Microsoft Windows 11 version 26H1: Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized…7.0 HighN/AN/ANov 10, 2026
CVE-2026-113760: Microsoft: Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.8.8 HighN/AN/ANov 10, 2026
CVE-2026-113759: Microsoft: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-113758: Microsoft: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-113757: Microsoft: Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-113756: Microsoft: Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-113755: Microsoft: Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113754: Microsoft: Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113753: Microsoft Windows 11 version 26H1: Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.8.2 HighN/AN/ANov 10, 2026
CVE-2026-113752: Microsoft: Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113751: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver…7.0 HighN/AN/ANov 10, 2026
CVE-2026-113750: Microsoft: Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113749: Microsoft: Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113748: Microsoft: Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges…7.8 HighN/AN/ANov 10, 2026
CVE-2026-112990: Microsoft: Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.4.7 MediumN/AN/ANov 10, 2026
CVE-2026-112989: Microsoft: Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112988: Microsoft: Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112987: Microsoft: Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate…7.0 HighN/AN/ANov 10, 2026
CVE-2026-112986: Microsoft: No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
1226-1250 of 511254
‹

Refine your search or filters to see more results.