The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checking4.3 MediumN/AN/AOct 20, 2026
CVE-2026-86915: Apple macOS: A race condition was addressed with improved locking4.7 MediumN/AN/AOct 20, 2026
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory management5.4 MediumN/AN/AOct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checks4.4 MediumN/AN/AOct 20, 2026
CVE-2026-86875: Apple Xcode: An input validation issue was addressed with improved input validation4.3 MediumN/AN/AOct 20, 2026
CVE-2026-86874: Apple Xcode: An out-of-bounds read was addressed with improved input validation3.3 LowN/AN/AOct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validation5.9 MediumN/AN/AOct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checking6.5 MediumN/AN/AOct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checksN/AN/AN/AOct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validation3.5 LowN/AN/AOct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's access5.5 MediumN/AN/AOct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state management2.0 LowN/AN/AOct 20, 2026
CVE-2026-77936: letta-ai letta: Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-77934: coze-dev coze-studio: Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands…8.8 High8.7 HighN/AOct 20, 2026
CVE-2026-77930: EvoScientist: EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell…8.8 High8.7 HighN/AOct 20, 2026
CVE-2026-77926: apconw Aix-DB: Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating…8.8 High8.7 HighN/AOct 20, 2026
CVE-2026-75128: chatchat-space Langchain-Chatchat: Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-65396: Apple macOS: A buffer overflow was addressed with improved size validation5.5 MediumN/AN/AOct 20, 2026
CVE-2026-65379: Apple macOS: The issue was addressed with improved handling of secure input state5.5 MediumN/AN/AOct 20, 2026
CVE-2026-65372: Apple macOS: A race condition was addressed with additional validation4.7 MediumN/AN/AOct 20, 2026
CVE-2026-65356: Apple macOS: An access issue was addressed with improved access controls5.5 MediumN/AN/AOct 20, 2026
CVE-2026-28854: Apple macOS: The issue was addressed with additional app bundle integrity checksN/AN/AN/AOct 20, 2026
226-250 of 407346
‹›