The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121179: Google Chrome: Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 3, 2026
CVE-2026-121083: Google Chrome: Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary…N/AN/AN/ANov 3, 2026
CVE-2026-121082: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside…N/AN/AN/ANov 3, 2026
CVE-2026-121188: Google Chrome: Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute…N/AN/AN/ANov 3, 2026
CVE-2026-121118: Google Chrome: Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 3, 2026
CVE-2026-121124: Google Chrome: Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to…N/AN/AN/ANov 3, 2026
CVE-2026-121047: Google Chrome: Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 3, 2026
CVE-2026-121233: Google Chrome: Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary…N/AN/AN/ANov 3, 2026
CVE-2026-121203: Google Chrome: Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 3, 2026
CVE-2026-82154: Dell OS Recovery tool: Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability2.4 LowN/AN/ANov 3, 2026
CVE-2026-121509: n/a Headless CMS Plugin: A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress5.3 Medium5.5 MediumN/ANov 3, 2026
CVE-2026-115878: stanfordnlp stanza: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…7.8 HighN/AN/ANov 3, 2026
CVE-2026-95777: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer3.1 LowN/AN/ANov 3, 2026
CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…3.1 LowN/AN/ANov 3, 2026
CVE-2026-95775: Hewlett Packard Enterprise (HPE) Fabric Composer: A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer3.3 LowN/AN/ANov 3, 2026
CVE-2026-95774: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer3.7 LowN/AN/ANov 3, 2026
CVE-2026-95773: Hewlett Packard Enterprise (HPE) Fabric Composer: A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer3.8 LowN/AN/ANov 3, 2026
CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer4.2 MediumN/AN/ANov 3, 2026
CVE-2026-95771: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer4.3 MediumN/AN/ANov 3, 2026
CVE-2026-95770: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer…4.7 MediumN/AN/ANov 3, 2026
CVE-2026-95769: Hewlett Packard Enterprise (HPE) Fabric Composer: An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-95765: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric…5.4 MediumN/AN/ANov 3, 2026
276-300 of 528356
‹›