The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-109395: ning compress-lzf: Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based…9.1 Critical8.8 High1%Oct 20, 2026
CVE-2026-105298: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority…N/A6.3 Medium1%Oct 20, 2026
CVE-2026-105297: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its…7.5 HighN/A0%Oct 20, 2026
CVE-2026-86981: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86979: Apple macOS: A privacy issue was addressed with improved checksN/AN/A0%Oct 20, 2026
CVE-2026-86977: Apple iOS and iPadOS: An authorization issue was addressed with improved network restrictionsN/AN/A0%Oct 20, 2026
CVE-2026-86976: Apple: An authorization issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-86975: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86963: Apple iOS and iPadOS: A denial-of-service issue was addressed with improved input validationN/AN/A0%Oct 20, 2026
CVE-2026-86962: Apple: A double free issue was addressed with improved memory managementN/AN/A0%Oct 20, 2026
CVE-2026-86961: Apple: A race condition was addressed with additional validationN/AN/A0%Oct 20, 2026
CVE-2026-86959: Apple: An input validation issue was addressed with improved input validationN/AN/A0%Oct 20, 2026
CVE-2026-86957: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86955: Apple iOS and iPadOS: An authorization issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-86953: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86944: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86940: Apple macOS: This issue was addressed by removing the vulnerable codeN/AN/A0%Oct 20, 2026
CVE-2026-86935: Apple macOS: This issue was addressed by removing additional entitlementsN/AN/A0%Oct 20, 2026
CVE-2026-86933: Apple macOS: A permissions issue was addressed with additional sandbox restrictionsN/AN/A0%Oct 20, 2026
CVE-2026-86932: Apple macOS: An authorization issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-86928: Apple macOS: A path handling issue was addressed with improved validationN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-86922: webkitgtk: WebKitGTK: Arbitrary code execution via type confusionN/AN/A0%Oct 20, 2026
CVE-2026-86921: Apple: A permissions issue was addressed with improved validationN/AN/A0%Oct 20, 2026
CVE-2026-86919: Apple: A stack overflow was addressed with improved input validationN/AN/A0%Oct 20, 2026
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
4376-4400 of 416032