The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-104895: FasterXML jackson-dataformat-smile: The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input…7.5 HighN/AN/AOct 28, 2026
CVE-2026-104016: FasterXML jackson-dataformat-protobuf: ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and…7.5 HighN/AN/AOct 28, 2026
CVE-2026-59158: thoda-dev nuxt-ollama: Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications7.5 HighN/AN/AOct 27, 2026
CVE-2026-58496: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine4.3 MediumN/AN/AOct 27, 2026
CVE-2026-58257: JeromeDevome GRR: GRR is a resource management and reservation application7.2 HighN/AN/AOct 27, 2026
CVE-2026-58256: JeromeDevome GRR: GRR is a resource management and reservation application9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-58255: jhuckaby Cronicle: Cronicle is a multi-server task scheduler and runner, with a web based front-end UI8.8 HighN/AN/AOct 27, 2026
CVE-2026-58205: JeromeDevome GRR: GRR is a resource management and reservation application8.1 HighN/AN/AOct 27, 2026
CVE-2026-50571: w3c websub: WebSub is a W3C recommendation produced by the Social Web Working Group5.7 MediumN/AN/AOct 27, 2026
CVE-2026-22063: NetApp: The private keys of eight eMudhra intermediate CA certificates have been compromisedN/A6.0 MediumN/AOct 27, 2026
CVE-2026-18326: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
CVE-2026-118359: Google Chrome: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118358: Google Chrome: Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118357: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118356: Google Chrome: Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118354: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118353: Google Chrome: Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118352: Google Chrome: Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118351: Google Chrome: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118350: Google Chrome: Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118349: Google Chrome: Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118348: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118347: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118346: Google Chrome: Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118345: Google Chrome: Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
751-775 of 413066