The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113038: Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read…N/AN/AN/AOct 20, 2026
CVE-2026-113036: Google Chrome: Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113035: Google Chrome: Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory…N/AN/AN/AOct 20, 2026
CVE-2026-113030: Google Chrome: Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass…N/AN/AN/AOct 20, 2026
CVE-2026-113029: Google Chrome: Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113026: Google Chrome: Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113025: Google Chrome: Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113024: Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113023: Google Chrome: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113021: Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113020: Google Chrome: Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113017: Google Chrome: Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113014: Google Chrome: Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113013: Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113010: Google Chrome: Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory…N/AN/AN/AOct 20, 2026
CVE-2026-113007: Google Chrome: Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113002: Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-112998: Google Chrome: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112996: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112994: Google Chrome: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112992: Google Chrome: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-111879: Improper LockingN/AN/AN/AOct 20, 2026
CVE-2026-108518: Access of Resource Using Incompatible Type ('Type Confusion')N/AN/AN/AOct 20, 2026
CVE-2026-101857: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101856: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
751-775 of 407346