The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft .NET Framework: CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability7.4 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-96220: Windows Assigned Access Elevation of Privilege Vulnerability7.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-96219: Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-96218: Windows Update Stack Tampering Vulnerability5.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-96217: Windows NTFS Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-96216: Windows Kernel Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
CVE-2026-96204: Microsoft Arc Enabled Servers - Azure Connected Machine Agent: Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.6.5 MediumN/A1%Oct 13, 2026
CVE-2026-70049: Microsoft: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager…8.0 HighN/A2%Oct 13, 2026
Microsoft Office: CVE-2026-88196: Microsoft Office Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88197: Microsoft Office Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88201: Microsoft Office Excel Information Disclosure Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88178: Microsoft Office PowerPoint Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88175: Microsoft Office Excel Information Disclosure Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88156: Microsoft Office Outlook Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88151: Microsoft Office Excel Information Disclosure Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88145: Microsoft Office Excel Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-88153: Microsoft Office Excel Information Disclosure Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-70291: Microsoft Office Outlook Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Office: CVE-2026-70282: Microsoft Office Outlook Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-70257: Microsoft Office Outlook Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Office: CVE-2026-70256: Microsoft Office Outlook Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft .NET: CVE-2026-70197: .NET Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
1951-1975 of 561657