The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-57048: Google Android: In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-57047: Google Android: In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a…N/AN/AN/ANov 10, 2026
CVE-2026-57043: Google Android: In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on…N/AN/AN/ANov 10, 2026
CVE-2026-57037: Google Android: In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control…N/AN/AN/ANov 10, 2026
CVE-2026-57036: Google Android: In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-57013: Google Android: In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via…6.7 MediumN/AN/ANov 10, 2026
CVE-2026-57010: Google Android: In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-57009: Google Android: In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-57005: Google Android: In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputyN/AN/AN/ANov 10, 2026
CVE-2026-57004: Google Android: In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56995: Google Android: In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory…N/AN/AN/ANov 10, 2026
CVE-2026-56980: Google Android: In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared…N/AN/AN/ANov 10, 2026
CVE-2026-56971: Google Android: In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56969: Google Android: In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56966: Google Android: In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access…N/AN/AN/ANov 10, 2026
CVE-2026-56956: Google Android: In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-56951: Google Android: In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak…N/AN/AN/ANov 10, 2026
CVE-2026-56949: Google Android: In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-56947: Google Android: In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused…N/AN/AN/ANov 10, 2026
CVE-2026-56946: Google Android: In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page…N/AN/AN/ANov 10, 2026
CVE-2026-56944: Google Android: In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there…N/AN/AN/ANov 10, 2026
CVE-2026-56943: Google Android: In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle…N/AN/AN/ANov 10, 2026
CVE-2026-56938: Google Android: In port_shutdown of ipc.c, there is a possible Use After Free due to a race conditionN/AN/AN/ANov 10, 2026
CVE-2026-56935: Google Android: In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic errorN/AN/AN/ANov 10, 2026
CVE-2026-56934: Google Android: In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic…N/AN/AN/ANov 10, 2026
451-475 of 543212