The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-56902: Google Android: In multiple locations, there is a possible information disclosure due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56898: Google Android: In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages…N/AN/AN/ANov 10, 2026
CVE-2026-56897: Google Android: In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack…N/AN/AN/ANov 10, 2026
CVE-2026-56884: Google Android: In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via…6.7 MediumN/AN/ANov 10, 2026
CVE-2026-55362: Google Android: In multiple files, there is a possible out-of-bounds write due to a missing bounds checkN/AN/AN/ANov 10, 2026
CVE-2026-55360: Google Android: In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel…N/AN/AN/ANov 10, 2026
CVE-2026-55348: Google Android: In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via…N/AN/AN/ANov 10, 2026
CVE-2026-55346: Google Android: In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a…6.7 MediumN/AN/ANov 10, 2026
CVE-2026-55344: Google Android: In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-55335: Google Android: In multiple locations, there is a possible use-after-free due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-55321: Google Android: In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-55319: Google Android: In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to…N/AN/AN/ANov 10, 2026
CVE-2026-55316: Google Android: In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-55312: Google Android: In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due…N/AN/AN/ANov 10, 2026
CVE-2026-55311: Google Android: In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-55309: Google Android: In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault…N/AN/AN/ANov 10, 2026
CVE-2026-55297: Google Android: In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-50080: BlackBerry Ltd: Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by…3.3 LowN/AN/ANov 10, 2026
CVE-2026-50079: BlackBerry Ltd: Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the…3.3 LowN/AN/ANov 10, 2026
CVE-2026-50078: BlackBerry Ltd: Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information…4.4 MediumN/AN/ANov 10, 2026
CVE-2026-50077: BlackBerry Ltd: Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the…7.7 HighN/AN/ANov 10, 2026
CVE-2026-26248: Fortinet: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…8.8 HighN/AN/ANov 10, 2026
CVE-2026-14447: Google Android: In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an…N/AN/AN/ANov 10, 2026
CVE-2026-126062: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming language3.7 LowN/AN/ANov 10, 2026
CVE-2026-126061: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.3 MediumN/AN/ANov 10, 2026
551-575 of 511254