The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-76027: Google Chrome: Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-76026: Google Chrome: Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76025: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 30, 2026
CVE-2026-76024: Google Chrome: Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-119272: Google Chrome: Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-119271: Google Chrome: Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119270: Google Chrome: Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119269: Google Chrome: Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119268: Google Chrome: Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119267: Google Chrome: Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119266: Google Chrome: Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119265: Google Chrome: Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119264: Google Chrome: Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119263: Google Chrome: Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 30, 2026
CVE-2026-119262: Google Chrome: Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 30, 2026
CVE-2026-119261: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 30, 2026
CVE-2026-119260: Google Chrome: Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 30, 2026
CVE-2026-118959: Red Hat: A flaw was found in the required action provider mechanism of Keycloak5.4 MediumN/AN/AOct 30, 2026
CVE-2026-118947: Red Hat: A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-112605: Apple Xcode: This issue was addressed with improved handling of symlinksN/AN/AN/AOct 30, 2026
CVE-2026-112602: Apple Xcode: An authorization issue was addressed with improved state managementN/AN/AN/AOct 30, 2026
CVE-2026-110133: Red Hat: A flaw was found in Ghostscript5.8 MediumN/AN/AOct 30, 2026
CVE-2026-92744: Delinea Privilege Manager: Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as…N/A8.7 HighN/AOct 29, 2026
CVE-2026-112211: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-107239: Veeam Management Pack for Microsoft System Center: A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution…N/A8.8 HighN/AOct 29, 2026
626-650 of 418318