The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113731: djust-org djust: djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance3.3 LowN/AN/AOct 20, 2026
CVE-2026-113730: orphan-oss ognl: OGNL is an Object Graph Navigation Library for Java5.6 MediumN/AN/AOct 20, 2026
CVE-2026-113729: moov-io signedxml: Moov signedxml is a pure Go library for processing signed XML documents7.5 HighN/AN/AOct 20, 2026
CVE-2026-113728: bulwarkmail webmail: Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server7.5 HighN/AN/AOct 20, 2026
CVE-2026-113727: openchoreo: OpenChoreo is a developer platform for Kubernetes7.4 HighN/AN/AOct 20, 2026
CVE-2026-113726: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113704: a2aproject a2a-rs: A vulnerability has been found in a2aproject a2a-rs up to 0.4.37.3 High6.9 MediumN/AOct 20, 2026
CVE-2026-113344: Google Chrome: Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113343: Google Chrome: Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113342: Google Chrome: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113341: Google Chrome: Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113340: Google Chrome: Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113338: Google Chrome: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113337: Google Chrome: Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113336: Google Chrome: Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113335: Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113334: Google Chrome: Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113333: Google Chrome: Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read…N/AN/AN/AOct 20, 2026
CVE-2026-113332: Google Chrome: Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113331: Google Chrome: Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113330: Google Chrome: Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113329: Google Chrome: Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113328: Google Chrome: Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113326: Google Chrome: Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113325: Google Chrome: Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
726-750 of 407346