The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Microsoft Windows: CVE-2026-83708: Windows Installer Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83707: Windows Event Tracing Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83706: Windows NTFS Elevation of Privilege Vulnerability6.7 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83705: HTTP.sys Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83704: Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83700: Windows Now Playing Session Manager Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83699: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83693: Windows Error Reporting Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-83694: Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83692: Windows Bind Filter Driver Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83691: Windows DHCP Server Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83690: Windows Kernel Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83688: Remote Desktop Client Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-83687: Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
CVE-2026-83681: Microsoft Microsoft PowerToys: Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83678: Windows TCP/IP Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83675: Windows Kernel Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83669: Windows Error Reporting Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83671: Windows Hyper-V Information Disclosure Vulnerability6.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83667: Windows Active Directory Domain Services Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability7.0 HighN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83658: Windows Error Reporting Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83657: Windows Modern Device Management (MDM) Tampering Vulnerability5.5 MediumN/A0%Oct 13, 2026
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability7.5 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-83654: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
2376-2400 of 660569
‹›