The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126900: Google Chrome: Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126899: Google Chrome: Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126897: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126895: Google Chrome: Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126893: Google Chrome: Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126892: Google Chrome: Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126890: Google Chrome: Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126889: Google Chrome: Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126888: Google Chrome: Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126887: Google Chrome: Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126886: Google Chrome: Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126885: Google Chrome: Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary…9.6 CriticalN/AN/ANov 11, 2026
CVE-2026-126883: Google Chrome: Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had…7.5 HighN/AN/ANov 11, 2026
CVE-2026-126882: Google Chrome: Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the…N/AN/AN/ANov 11, 2026
CVE-2026-126881: Google Chrome: Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126880: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126879: Google Chrome: Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126878: Google Chrome: Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data…N/AN/AN/ANov 11, 2026
CVE-2026-126877: Google Chrome: Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the…7.5 HighN/AN/ANov 11, 2026
CVE-2026-126876: Google Chrome: Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126874: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126873: Google Chrome: Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126872: Google Chrome: Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging…9.6 CriticalN/AN/ANov 11, 2026
CVE-2026-126869: Google Chrome: Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/ANov 11, 2026
CVE-2026-126868: Google Chrome: Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary…8.8 HighN/AN/ANov 11, 2026
301-325 of 433023