The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112626: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112651: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112484: Apple macOS: This issue was addressed with improved file handlingN/AN/AN/AOct 26, 2026
CVE-2026-112556: Apple macOS: A race condition was addressed with additional validationN/AN/AN/AOct 26, 2026
CVE-2026-112655: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112659: Apple: A type confusion issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-112623: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112438: Apple macOS: A logic issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-64759: Apple: An integer overflow was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-70382: WolfVision: Some externally supplied values stored by the device may be rendered in the web interface without sufficient output…4.1 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-70381: WolfVision: An access-control vulnerability has been identified in the web server configuration5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-70380: WolfVision: A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-65632: potatosalad jose: The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical lengthN/A5.1 MediumN/AOct 26, 2026
CVE-2026-65631: potatosalad jose: Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65630: potatosalad jose: Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-65629: potatosalad jose: Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a…N/A7.4 HighN/AOct 26, 2026
CVE-2026-65628: potatosalad jose: jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKsN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65627: potatosalad jose: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65626: potatosalad jose: The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracleN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65625: potatosalad jose: The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-57196: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 26, 2026
CVE-2026-57193: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.9 MediumN/AOct 26, 2026
CVE-2026-57187: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.1 HighN/AOct 26, 2026
CVE-2026-57184: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.3 MediumN/AOct 26, 2026
CVE-2026-116482: subhajitkhan online-clinic-management-system: A vulnerability has been found in subhajitkhan online-clinic-management-system up to…3.5 Low2.0 LowN/AOct 26, 2026
376-400 of 416032