The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-112797: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112796: Microsoft: Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112795: Microsoft: Untrusted pointer dereference in Windows Security Account Manager allows an authorized attacker to deny service over a…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-112794: Microsoft: Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-112793: Microsoft: Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-112792: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112791: Microsoft: Time-of-check time-of-use (toctou) race condition in Windows Print Spooler Components allows an authorized attacker to…7.0 HighN/AN/ANov 10, 2026
CVE-2026-112790: Microsoft: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112789: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-112766: Microsoft: Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112765: Microsoft: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges…7.0 HighN/AN/ANov 10, 2026
CVE-2026-112764: Microsoft: Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-105567: Microsoft: Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112763: Microsoft: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112762: Microsoft: Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over…8.8 HighN/AN/ANov 10, 2026
CVE-2026-112761: Microsoft: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112760: Microsoft: Integer overflow or wraparound in Windows Overlay Filter allows an unauthorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-112759: Microsoft: Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112758: Microsoft: Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
CVE-2026-112757: Microsoft: Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker…6.0 MediumN/AN/ANov 10, 2026
CVE-2026-112756: Microsoft: Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/ANov 10, 2026
CVE-2026-112755: Microsoft: Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.6.8 MediumN/AN/ANov 10, 2026
CVE-2026-112754: Microsoft: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.5.5 MediumN/AN/ANov 10, 2026
CVE-2026-112753: Microsoft Windows 11 version 26H1: Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver…7.0 HighN/AN/ANov 10, 2026
CVE-2026-112752: Microsoft: Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/ANov 10, 2026
1226-1250 of 557027
‹

Refine your search or filters to see more results.