The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Microsoft ASP.NET: CVE-2026-88092: ASP.NET Core Tampering Vulnerability9.4 CriticalN/A1%Oct 13, 2026
CVE-2026-88075: Microsoft: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager…8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-87696: Microsoft Exchange Server Elevation of Privilege Vulnerability7.5 HighN/A0%Oct 13, 2026
Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Exchange: CVE-2026-87692: Microsoft Exchange Server Elevation of Privilege Vulnerability7.8 HighN/A2%Oct 13, 2026
CVE-2026-85873: Microsoft: Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…6.5 MediumN/A1%Oct 13, 2026
CVE-2026-83746: Microsoft: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…8.1 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-77910: Microsoft Exchange Server Elevation of Privilege Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
CVE-2026-70297: Microsoft: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-70279: Microsoft Exchange Server Spoofing Vulnerability9.3 CriticalN/A1%Oct 13, 2026
Microsoft Windows Defender: CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70261: Microsoft Trace Data Helper Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70260: Microsoft Trace Data Helper Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability8.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-70228: Desktop Window Manager Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70227: Windows Device Association Service Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70111: Windows Kernel Elevation of Privilege Vulnerability8.1 HighN/A1%Oct 13, 2026
CVE-2026-85925: Microsoft: Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to…8.2 HighN/A0%Oct 13, 2026
CVE-2026-85922: Microsoft: Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.7.4 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-70160: Windows Kernel Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70158: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-70148: Windows Broadcast DVR User Service Information Disclosure Vulnerability6.5 MediumN/A0%Oct 13, 2026
1326-1350 of 403518
‹›