The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-0178: Google Android: In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale…N/AN/AN/ANov 10, 2026
CVE-2026-0175: Google Android: In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a…N/AN/AN/ANov 10, 2026
CVE-2026-0169: Google Android: In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test…N/AN/AN/ANov 10, 2026
CVE-2025-61625: Fortinet: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…8.1 HighN/AN/ANov 10, 2026
CVE-2026-99288: Linux: In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established…N/AN/AN/ANov 10, 2026
CVE-2026-99287: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: Zero out sring pointers on unmap If…N/AN/AN/ANov 10, 2026
CVE-2026-99286: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup…N/AN/AN/ANov 10, 2026
CVE-2026-95692: OpenSSL: Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVP_CipherInit_ex() may trigger a…N/AN/AN/ANov 10, 2026
CVE-2026-95691: OpenSSL: Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage while the TLS record layer retains a direct…N/AN/AN/ANov 10, 2026
CVE-2026-94513: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.8.0 HighN/AN/ANov 10, 2026
CVE-2026-88823: OpenSSL: Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional Authenticated Data (AAD) update as a…N/AN/AN/ANov 10, 2026
CVE-2026-88822: OpenSSL: Issue summary: QUIC, when performing automated peer detection, may allow uninitialized stack data to leak into the…N/AN/AN/ANov 10, 2026
CVE-2026-88240: Microsoft: Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent…8.0 HighN/AN/ANov 10, 2026
CVE-2026-88187: Microsoft: Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an…8.0 HighN/AN/ANov 10, 2026
CVE-2026-88176: Microsoft Microsoft SharePoint Server Subscription Edition: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8.8 HighN/AN/ANov 10, 2026
CVE-2026-85923: Microsoft Azure DevOps Server: Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate…8.8 HighN/AN/ANov 10, 2026
CVE-2026-84010: Microsoft: Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-80095: Microsoft Microsoft SharePoint Server Subscription Edition: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint…9.0 CriticalN/AN/ANov 10, 2026
CVE-2026-80094: Microsoft: Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.7.5 HighN/AN/ANov 10, 2026
CVE-2026-70003: Microsoft Microsoft JDBC Driver for SQL Server 13.4: Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to…8.7 HighN/AN/ANov 10, 2026
CVE-2026-54437: BlackBerry Ltd QNX Software Development Platform: Improper Input Validation in the io-char library's DCMD_CHR_TCINJECTC devctl() handler could allow an attacker with…6.2 MediumN/AN/ANov 10, 2026
CVE-2026-54436: BlackBerry Ltd QNX Software Development Platform: Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with…7.4 HighN/AN/ANov 10, 2026
CVE-2026-40275: BlackBerry Ltd: Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to…8.4 HighN/AN/ANov 10, 2026
CVE-2026-40274: BlackBerry Ltd: Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-40273: BlackBerry Ltd: Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted…4.0 MediumN/AN/ANov 10, 2026
751-775 of 511254