The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-36001: Uncontrolled Recursion6.5 MediumN/A0%Jan 30, 2026
CVE-2025-2668: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Jan 30, 2026
CVE-2020-37058: Unquoted Search Path or Element7.8 High8.5 High0%Jan 30, 2026
CVE-2025-6723: Improper Privilege ManagementN/A5.8 Medium0%Jan 30, 2026
CVE-2026-1680: Execution with Unnecessary Privileges7.8 High7.1 High0%Jan 30, 2026
CVE-2026-24687: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium6.0 Medium0%Jan 29, 2026
CVE-2026-24414: Incorrect Default Permissions5.5 Medium6.8 Medium0%Jan 29, 2026
CVE-2026-24413: Incorrect Default Permissions5.5 Medium6.8 Medium0%Jan 29, 2026
CVE-2020-37000: Stack-based Buffer Overflow9.8 Critical8.4 High0%Jan 29, 2026
CVE-2026-23570: Improper Input Validation6.5 MediumN/A1%Jan 29, 2026
CVE-2026-23569: Out-of-bounds Read6.5 MediumN/A0%Jan 29, 2026
CVE-2026-23568: Out-of-bounds Read5.4 MediumN/A0%Jan 29, 2026
CVE-2026-23567: Heap-based Buffer Overflow6.5 MediumN/A0%Jan 29, 2026
CVE-2026-23566: Improper Input Validation6.5 MediumN/A0%Jan 29, 2026
CVE-2026-23565: NULL Pointer Dereference6.5 MediumN/A0%Jan 29, 2026
CVE-2026-23564: Cleartext Transmission of Sensitive Information6.5 MediumN/A0%Jan 29, 2026
CVE-2026-23563: Improper Link Resolution Before File Access5.7 MediumN/A0%Jan 29, 2026
CVE-2026-25067: Use of Incorrectly-Resolved Name or Reference5.3 Medium6.9 Medium0%Jan 29, 2026
CVE-2026-24739: Improper Neutralization of Argument Delimiters in a Command6.3 MediumN/A0%Jan 28, 2026
CVE-2025-33237: NULL Pointer Dereference5.5 MediumN/A0%Jan 28, 2026
CVE-2025-33218: Integer Overflow or Wraparound7.8 HighN/A0%Jan 28, 2026
CVE-2025-33217: Use After Free7.8 HighN/A0%Jan 28, 2026
CVE-2025-13919: Uncontrolled Search Path Element4.4 MediumN/A0%Jan 28, 2026
CVE-2020-36990: Unquoted Search Path or Element7.8 High8.5 High0%Jan 28, 2026
CVE-2020-36985: Unquoted Search Path or Element7.8 High8.5 High0%Jan 28, 2026
2576-2600 of 16013