The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-69043: Samsung Semiconductor: In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory…N/AN/A0%Nov 5, 2026
CVE-2026-69025: Samsung Semiconductor: In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write,…N/AN/A0%Nov 5, 2026
CVE-2026-69006: Samsung Semiconductor: Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.N/AN/A0%Nov 5, 2026
CVE-2026-69005: Samsung Semiconductor: Integer overflow in NPU driver parameter processing due to insufficient bounds checking.N/AN/A0%Nov 5, 2026
CVE-2026-69002: Samsung Semiconductor: Incorrect authorization in Samsung framework services due to missing permission checksN/AN/A0%Nov 5, 2026
CVE-2026-68994: Samsung Semiconductor: A double free vulnerability in NPU driver due to improper pointer management (941)N/AN/A0%Nov 5, 2026
CVE-2026-68993: Samsung Semiconductor: A double free vulnerability in NPU driver due to improper pointer management (940)N/AN/A0%Nov 5, 2026
CVE-2026-68991: Samsung Semiconductor: In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory…N/AN/A0%Nov 5, 2026
CVE-2026-68990: Samsung Semiconductor: In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption,…N/AN/A0%Nov 5, 2026
CVE-2026-68985: Samsung Semiconductor: In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds…N/AN/A0%Nov 5, 2026
CVE-2026-68984: Samsung Semiconductor: In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory…N/AN/A0%Nov 5, 2026
CVE-2026-48186: Samsung Semiconductor: Improper handling of messages before AS security activation can cause unexpected behaviorN/AN/A0%Nov 5, 2026
CVE-2026-48183: Samsung Semiconductor: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with…N/AN/A0%Nov 5, 2026
CVE-2026-48179: Samsung Semiconductor: In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of ServiceN/AN/A0%Nov 5, 2026
CVE-2026-48178: Samsung Semiconductor: Out of bound access in PPC due to race condition in global variable accessN/AN/A0%Nov 5, 2026
CVE-2026-48176: Samsung Semiconductor: A memory corruption vulnerability caused by improper validation of messagesN/AN/A0%Nov 5, 2026
CVE-2026-48175: Samsung Semiconductor: Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.5.5 MediumN/A0%Nov 5, 2026
CVE-2026-48174: Samsung Semiconductor: In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…N/AN/A0%Nov 5, 2026
CVE-2026-48173: Samsung Semiconductor: In the NAS message handler, improper validation of the length field in NAS message causes memory corruptionN/AN/A0%Nov 5, 2026
CVE-2026-35495: Samsung Semiconductor: In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabilityN/AN/A0%Nov 5, 2026
CVE-2026-35494: Samsung Semiconductor: In the baseband, memory corruption during NAS packet processing can cause a denial of service.N/AN/A0%Nov 5, 2026
CVE-2026-33972: Samsung Semiconductor: In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.N/AN/A0%Nov 5, 2026
CVE-2026-33971: Samsung Semiconductor: In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…N/AN/A0%Nov 5, 2026
CVE-2026-33969: Samsung Semiconductor: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop,…N/AN/A0%Nov 5, 2026
CVE-2026-33965: Samsung Semiconductor: An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through…N/AN/A0%Nov 5, 2026
251-275 of 423114
‹›