Lucene search
+L
Rapid7Recent

412514 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88112: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88093: Heap-based Buffer Overflow

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00259EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88096: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00153EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88092: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

9.4CVSS5.9AI score0.00786EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88130: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

6.5CVSS5.8AI score0.0109EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-88091: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.02933EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-88103: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-88105: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88072: Improper Link Resolution Before File Access

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00345EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88073: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

8.8CVSS8.1AI score0.00259EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88074: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00323EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

CVE-2026-88070: Out-of-bounds Read

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00321EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88080: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-88079: NULL Pointer Dereference

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

7CVSS5.5AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88116: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-87711: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.0024EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96324: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

CVE-2026-96315: Missing Authorization

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00281EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96314: Out-of-bounds Read

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96308: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96307: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96305: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96250: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96930: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96929: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00361EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96931: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96928: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-97805: Out-of-bounds Read

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network...

9.8CVSS6.3AI score0.00936EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-97799: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00295EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-97803: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-97804: Heap-based Buffer Overflow

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00321EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96934: Use After Free

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

9.8CVSS9AI score0.00712EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96935: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96925: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96217: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96247: Use of Uninitialized Resource

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-96245: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00983EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96248: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.01125EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96223: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96219: Out-of-bounds Write

Out-of-bounds write in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to execute code over a network...

9.8CVSS6.2AI score0.00874EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96220: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00301EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96218: External Control of System or Configuration Setting

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00552EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96316: Missing Authorization

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00281EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96321: Out-of-bounds Read

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96317: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96318: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96309: Use After Free

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96319: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96313: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0022EPSS
SaveExploits0References3
Total number of security vulnerabilities412514