The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-85909: Untrusted Pointer Dereference5.5 MediumN/A0%Oct 13, 2026
CVE-2026-85908: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85906: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-85905: Heap-based Buffer Overflow8.8 HighN/A0%Oct 13, 2026
CVE-2026-85904: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Oct 13, 2026
CVE-2026-85903: Untrusted Pointer Dereference8.8 HighN/A1%Oct 13, 2026
CVE-2026-85902: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85901: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85900: Deserialization of Untrusted Data8.8 HighN/A2%Oct 13, 2026
CVE-2026-85891: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Oct 13, 2026
CVE-2026-85884: Missing Authentication for Critical Function7.8 HighN/A0%Oct 13, 2026
CVE-2026-85881: Stack-based Buffer Overflow8.0 HighN/A1%Oct 13, 2026
CVE-2026-85879: Time-of-check Time-of-use (TOCTOU) Race Condition7.0 HighN/A0%Oct 13, 2026
CVE-2026-85874: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-85873: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Oct 13, 2026
CVE-2026-85872: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-85871: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85870: Heap-based Buffer Overflow7.0 HighN/A0%Oct 13, 2026
CVE-2026-85869: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85868: Use After Free7.0 HighN/A0%Oct 13, 2026
CVE-2026-85867: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-85866: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.7 MediumN/A0%Oct 13, 2026
CVE-2026-85865: Authentication Bypass Using an Alternate Path or Channel5.5 MediumN/A0%Oct 13, 2026
CVE-2026-85864: Improper Restriction of Names for Files and Other Resources7.8 HighN/A1%Oct 13, 2026
CVE-2026-85863: Use After Free7.8 HighN/A0%Oct 13, 2026
526-550 of 16867