The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-42309: Heap-based Buffer Overflow5.5 Medium5.1 Medium0%May 9, 2026
CVE-2026-42308: Integer Overflow or Wraparound5.5 Medium5.1 Medium0%May 9, 2026
CVE-2026-6665: Stack-based Buffer Overflow9.8 CriticalN/A0%May 9, 2026
CVE-2026-6664: Integer Overflow or Wraparound7.5 HighN/A1%May 9, 2026
CVE-2026-45130: Heap-based Buffer Overflow5.5 MediumN/A0%May 8, 2026
CVE-2026-42199: Integer Overflow or Wraparound6.2 MediumN/A0%May 8, 2026
CVE-2026-29974: Stack-based Buffer Overflow7.5 HighN/A1%May 8, 2026
CVE-2026-29972: Stack-based Buffer Overflow8.2 HighN/A1%May 8, 2026
CVE-2026-43361: Undefined Security Weakness5.5 MediumN/A0%May 8, 2026
CVE-2026-43359: Integer Underflow (Wrap or Wraparound)5.5 MediumN/A0%May 8, 2026
CVE-2026-43407: Out-of-bounds Read9.1 CriticalN/A1%May 8, 2026
CVE-2026-43380: Out-of-bounds Read7.8 HighN/A0%May 8, 2026
CVE-2026-43368: Undefined Security Weakness7.8 HighN/A0%May 8, 2026
CVE-2026-43323: Undefined Security Weakness5.5 MediumN/A0%May 8, 2026
CVE-2026-41509: Stack-based Buffer Overflow9.8 Critical6.9 Medium1%May 8, 2026
CVE-2026-43330: Out-of-bounds Write7.8 HighN/A0%May 8, 2026
CVE-2026-8138: Stack-based Buffer Overflow8.8 High7.4 High1%May 8, 2026
CVE-2026-8137: Buffer Copy without Checking Size of Input8.8 High7.4 High1%May 8, 2026
CVE-2026-8087: Heap-based Buffer Overflow7.8 High1.9 Low0%May 7, 2026
CVE-2026-42241: Memory Allocation with Excessive Size Value5.3 MediumN/A0%May 7, 2026
CVE-2026-8086: Heap-based Buffer Overflow7.8 High1.9 Low0%May 7, 2026
CVE-2026-41142: Integer Overflow or Wraparound8.8 HighN/A1%May 7, 2026
CVE-2026-7973: External Control of Assumed-Immutable Web Parameter8.8 HighN/A0%May 6, 2026
CVE-2026-7969: External Control of Assumed-Immutable Web Parameter4.3 MediumN/A0%May 6, 2026
CVE-2026-7942: External Control of Assumed-Immutable Web Parameter4.3 MediumN/A0%May 6, 2026
2901-2925 of 27837