The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-56949: Google Android: In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-56947: Google Android: In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused…N/AN/AN/ANov 10, 2026
CVE-2026-56946: Google Android: In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page…N/AN/AN/ANov 10, 2026
CVE-2026-56944: Google Android: In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there…N/AN/AN/ANov 10, 2026
CVE-2026-56943: Google Android: In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle…N/AN/AN/ANov 10, 2026
CVE-2026-56938: Google Android: In port_shutdown of ipc.c, there is a possible Use After Free due to a race conditionN/AN/AN/ANov 10, 2026
CVE-2026-56935: Google Android: In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic errorN/AN/AN/ANov 10, 2026
CVE-2026-56934: Google Android: In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic…N/AN/AN/ANov 10, 2026
CVE-2026-56933: Google Android: In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflowN/AN/AN/ANov 10, 2026
CVE-2026-56930: Google Android: In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream…N/AN/AN/ANov 10, 2026
CVE-2026-56929: Google Android: In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56926: Google Android: In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and…N/AN/AN/ANov 10, 2026
CVE-2026-56919: Google Android: In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56916: Google Android: In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56912: Google Android: In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56911: Google Android: In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check6.7 MediumN/AN/ANov 10, 2026
CVE-2026-56910: Google Android: In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an…N/AN/AN/ANov 10, 2026
CVE-2026-56909: Google Android: In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure…N/AN/AN/ANov 10, 2026
CVE-2026-56902: Google Android: In multiple locations, there is a possible information disclosure due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56898: Google Android: In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages…N/AN/AN/ANov 10, 2026
CVE-2026-56897: Google Android: In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack…N/AN/AN/ANov 10, 2026
CVE-2026-56884: Google Android: In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via…6.7 MediumN/AN/ANov 10, 2026
CVE-2026-55362: Google Android: In multiple files, there is a possible out-of-bounds write due to a missing bounds checkN/AN/AN/ANov 10, 2026
CVE-2026-55360: Google Android: In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel…N/AN/AN/ANov 10, 2026
CVE-2026-55348: Google Android: In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via…N/AN/AN/ANov 10, 2026
451-475 of 557027