The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-103838: Adobe Adobe Substance 3D Stager: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution…7.8 HighN/AN/AOct 13, 2026
CVE-2026-103851: Adobe Adobe Substance 3D Stager: Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
CVE-2026-103840: Adobe Adobe Substance 3D Stager: Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result…7.8 HighN/AN/AOct 13, 2026
CVE-2026-103830: Adobe Adobe Substance 3D Stager: Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
CVE-2026-97844: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97843: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97842: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97841: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97840: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97839: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97838: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97837: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97836: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97835: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97834: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97833: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97832: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97831: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97830: Microsoft: Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-97829: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97828: Microsoft: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97827: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97826: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97825: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-97824: Microsoft: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.6.5 MediumN/AN/AOct 13, 2026
426-450 of 417606
‹›