Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-97004: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-97003: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-97001: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-96997: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-96996: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-96995: Stack-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-96044: Improper Validation of Specified Type of Input8.8 HighN/A1%Oct 13, 2026
CVE-2026-94506: Out-of-bounds Read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88210: Reliance on Untrusted Inputs in a Security Decision7.8 HighN/A0%Oct 13, 2026
CVE-2026-88209: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-88208: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-88207: Heap-based Buffer Overflow7.5 HighN/A0%Oct 13, 2026
CVE-2026-88206: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Oct 13, 2026
CVE-2026-88204: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Oct 13, 2026
CVE-2026-88203: Untrusted Pointer Dereference6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88202: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-88201: Buffer Over-read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88200: Privilege Context Switching Error8.8 HighN/A1%Oct 13, 2026
CVE-2026-88198: Missing Authorization8.8 HighN/A1%Oct 13, 2026
CVE-2026-88197: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-88196: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-88195: Buffer Over-read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88192: Out-of-bounds Read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88190: Out-of-bounds Read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-88186: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
301-325 of 1993