The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113823: Microsoft Azure CycleCloud 8.9.2: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113822: Microsoft Azure CycleCloud 8.9.1: Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.6.5 MediumN/AN/ANov 10, 2026
CVE-2026-113821: Microsoft: Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information…4.1 MediumN/AN/ANov 10, 2026
CVE-2026-113820: Microsoft: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113819: Microsoft: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113818: Microsoft: Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-113817: Microsoft: Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-113816: Microsoft: Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate…4.1 MediumN/AN/ANov 10, 2026
CVE-2026-113815: Microsoft: Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113814: Microsoft: Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over…8.8 HighN/AN/ANov 10, 2026
CVE-2026-113773: Microsoft: Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.5.3 MediumN/AN/ANov 10, 2026
CVE-2026-113772: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113771: Microsoft Windows 11 version 26H1: Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-113770: Microsoft: Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-113769: Microsoft: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113768: Microsoft: Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a…7.5 HighN/AN/ANov 10, 2026
CVE-2026-113767: Microsoft: Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized…7.8 HighN/AN/ANov 10, 2026
CVE-2026-113766: Microsoft: Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.3.3 LowN/AN/ANov 10, 2026
CVE-2026-113765: Microsoft: Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate…7.8 HighN/AN/ANov 10, 2026
CVE-2026-113764: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-113763: Microsoft: Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface)…6.3 MediumN/AN/ANov 10, 2026
CVE-2026-113762: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-113761: Microsoft Windows 11 version 26H1: Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized…7.0 HighN/AN/ANov 10, 2026
CVE-2026-113760: Microsoft: Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.8.8 HighN/AN/ANov 10, 2026
CVE-2026-113759: Microsoft: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.7.8 HighN/AN/ANov 10, 2026
1226-1250 of 557027
‹

Refine your search or filters to see more results.