Lucene search
+L
Rapid7Recent

414110 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88194: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-85333: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00203EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-83869: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

9.8CVSS6.3AI score0.00634EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85338: Out-of-bounds Read

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00321EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-85322: Use of Uninitialized Resource

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.01027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-85904: Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00153EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85920: Windows BitLocker Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00158EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85915: Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85916: Azure Active Directory Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...

6.2CVSS5.7AI score0.00425EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85914: Windows Embedded Mode Service Elevation of Privilege Vulnerability

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88099: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

5.9CVSS5.8AI score0.00818EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88100: Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-87713: Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

7.5CVSS6.3AI score0.00275EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-87714: WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...

6.5CVSS5.8AI score0.0045EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88114: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-88091: Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.02933EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-87715: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88070: Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-96305: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-96306: Windows Sysmain Service Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-96308: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85375: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-85372: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85373: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85331: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00953EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85329: Microsoft Account Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Account allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00194EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85327: Windows Print Spooler Components Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85902: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00336EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00361EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85836: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85837: Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85815: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85807: Windows USB Video Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85804: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00336EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-85809: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

9.8CVSS5.9AI score0.00908EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85805: Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

6.5CVSS5.8AI score0.00593EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85802: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85791: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.0028EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85792: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

9.8CVSS5.9AI score0.00874EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85798: Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

7.2CVSS6.6AI score0.00869EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85793: Windows Sysmain Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00458EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85800: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85336: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0022EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-85796: Windows Installer Elevation of Privilege Vulnerability

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Total number of security vulnerabilities414110