The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-76029: Google Chrome: Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-76028: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 30, 2026
CVE-2026-76027: Google Chrome: Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via…N/AN/AN/AOct 30, 2026
CVE-2026-76026: Google Chrome: Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 30, 2026
CVE-2026-76025: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 30, 2026
CVE-2026-76024: Google Chrome: Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read…N/AN/AN/AOct 30, 2026
CVE-2026-119272: Google Chrome: Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory…N/AN/AN/AOct 30, 2026
CVE-2026-119271: Google Chrome: Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 30, 2026
CVE-2026-119270: Google Chrome: Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to…N/AN/AN/AOct 30, 2026
CVE-2026-119269: Google Chrome: Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 30, 2026
CVE-2026-119268: Google Chrome: Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-119267: Google Chrome: Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-119266: Google Chrome: Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-119265: Google Chrome: Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-119264: Google Chrome: Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…N/AN/AN/AOct 30, 2026
CVE-2026-119263: Google Chrome: Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…N/AN/AN/AOct 30, 2026
CVE-2026-119262: Google Chrome: Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…N/AN/AN/AOct 30, 2026
CVE-2026-119261: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…N/AN/AN/AOct 30, 2026
CVE-2026-119260: Google Chrome: Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 30, 2026
CVE-2026-118959: Red Hat: A flaw was found in the required action provider mechanism of Keycloak5.4 MediumN/AN/AOct 30, 2026
CVE-2026-118947: Red Hat: A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-112605: Apple Xcode: This issue was addressed with improved handling of symlinksN/AN/AN/AOct 30, 2026
CVE-2026-112602: Apple Xcode: An authorization issue was addressed with improved state managementN/AN/AN/AOct 30, 2026
CVE-2026-110133: Red Hat: A flaw was found in Ghostscript5.8 MediumN/AN/AOct 30, 2026
CVE-2026-92744: Delinea Privilege Manager: Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as…N/A8.7 HighN/AOct 29, 2026
226-250 of 520238