The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113023: Google Chrome: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113021: Google Chrome: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113020: Google Chrome: Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113017: Google Chrome: Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113014: Google Chrome: Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113013: Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113010: Google Chrome: Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory…N/AN/AN/AOct 20, 2026
CVE-2026-113007: Google Chrome: Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113002: Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-112998: Google Chrome: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112996: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112994: Google Chrome: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112992: Google Chrome: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-111879: Improper LockingN/AN/AN/AOct 20, 2026
CVE-2026-108518: Access of Resource Using Incompatible Type ('Type Confusion')N/AN/AN/AOct 20, 2026
CVE-2026-101857: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101856: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101855: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101854: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101853: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101852: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101851: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI)7.1 HighN/AN/AOct 20, 2026
CVE-2026-101850: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI)6.1 MediumN/AN/AOct 20, 2026
CVE-2026-101849: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance)7.6 HighN/AN/AOct 20, 2026
CVE-2026-101847: Oracle Corporation Oracle Bills of Material: Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations)7.5 HighN/AN/AOct 20, 2026
776-800 of 407346