The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126919: Google Chrome: Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary…N/AN/AN/ANov 11, 2026
CVE-2026-126912: Google Chrome: Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 11, 2026
CVE-2026-126887: Google Chrome: Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 11, 2026
CVE-2026-126886: Google Chrome: Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 11, 2026
CVE-2026-126859: Google Chrome: Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social…N/AN/AN/ANov 11, 2026
CVE-2026-126889: Google Chrome: Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute…N/AN/AN/ANov 11, 2026
CVE-2026-126864: Google Chrome: Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside…N/AN/AN/ANov 11, 2026
CVE-2026-126911: Google Chrome: Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary…N/AN/AN/ANov 11, 2026
CVE-2026-126846: Google Chrome: Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute…N/AN/AN/ANov 11, 2026
CVE-2026-126879: Google Chrome: Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 11, 2026
CVE-2026-126895: Google Chrome: Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code…N/AN/AN/ANov 11, 2026
CVE-2026-126885: Google Chrome: Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary…N/AN/AN/ANov 11, 2026
CVE-2026-81936: Lenovo XClarity Controller: An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC3)…6.8 Medium7.1 HighN/ANov 11, 2026
CVE-2026-68539: fulgur-rs fulgur: fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants7.5 HighN/AN/ANov 11, 2026
CVE-2026-68512: WardPearce paaster: Paaster is a pastebin applicationN/A6.3 MediumN/ANov 11, 2026
CVE-2026-68511: WardPearce paaster: Paaster is a pastebin applicationN/A6.3 MediumN/ANov 11, 2026
CVE-2026-67548: jaylfc taOS: taOS is a self-hosted AI agent OS8.3 HighN/AN/ANov 11, 2026
CVE-2026-67547: jaylfc taOS: taOS is a self-hosted AI agent OS8.8 HighN/AN/ANov 11, 2026
CVE-2026-67546: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure8.8 HighN/AN/ANov 11, 2026
CVE-2026-67545: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure7.4 HighN/AN/ANov 11, 2026
CVE-2026-67544: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure8.8 HighN/AN/ANov 11, 2026
CVE-2026-67543: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure8.8 HighN/AN/ANov 11, 2026
CVE-2026-67542: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure7.1 HighN/AN/ANov 11, 2026
CVE-2026-67541: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure8.1 HighN/AN/ANov 11, 2026
CVE-2026-67540: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure6.5 MediumN/AN/ANov 11, 2026
526-550 of 433023