The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Microsoft Windows: CVE-2026-70048: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-70041: Windows CD-ROM Driver Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-69934: Windows Spaceport.sys Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-69916: Windows NTFS Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
CVE-2026-69877: Microsoft: Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.6.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88165: Windows Active Directory Domain Services Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88173: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88162: Windows Encrypting File System (EFS) Tampering Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88168: Windows Bind Filter Driver Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88159: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88161: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88158: Microsoft Digest Authentication Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88157: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88124: Windows Installer Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88101: Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88096: Windows DCOM Server Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88091: Windows Management Instrumentation Elevation of Privilege Vulnerability7.8 HighN/A2%Oct 13, 2026
Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-87708: Windows Installer Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-85927: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-85920: Windows BitLocker Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-85918: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-85915: Windows PCI Bus Driver Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
2076-2100 of 660569
‹›