The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107249: Drupal Block AJAX: Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX…N/AN/AN/AOct 30, 2026
CVE-2026-91920: Red Hat: A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-74915: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or…N/AN/AN/AOct 30, 2026
CVE-2026-74912: Imagination Technologies Graphics DDK: On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is…N/AN/AN/AOct 30, 2026
CVE-2026-65587: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the…N/AN/AN/AOct 30, 2026
CVE-2026-65586: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in…N/AN/AN/AOct 30, 2026
CVE-2026-65584: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in…N/AN/AN/AOct 30, 2026
CVE-2026-19199: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memoryN/AN/AN/AOct 30, 2026
CVE-2026-18629: Imagination Technologies Graphics DDK: A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation…N/AN/AN/AOct 30, 2026
CVE-2026-15466: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in…N/AN/AN/AOct 30, 2026
CVE-2026-118475: Red Hat: A flaw was found in Eye of GNOME3.6 LowN/AN/AOct 30, 2026
CVE-2026-112922: Red Hat: A flaw was found in Ghostscript3.3 LowN/AN/AOct 30, 2026
CVE-2026-76031: Google Chrome: Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76030: Google Chrome: Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76029: Google Chrome: Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76028: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76027: Google Chrome: Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-76026: Google Chrome: Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76025: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76024: Google Chrome: Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-119272: Google Chrome: Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-119271: Google Chrome: Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119270: Google Chrome: Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119269: Google Chrome: Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119268: Google Chrome: Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
526-550 of 418318