The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-66586: Access of Resource Using Incompatible Type7.8 High7.3 High0%Dec 11, 2025
CVE-2025-66585: Use After Free7.8 High7.3 High0%Dec 11, 2025
CVE-2025-66584: Undefined Security WeaknessN/A7.7 High0%Dec 11, 2025
CVE-2025-66429: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Dec 11, 2025
CVE-2025-64702: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Dec 11, 2025
CVE-2025-55816: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 11, 2025
CVE-2025-14538: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 11, 2025
CVE-2025-14537: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Dec 11, 2025
CVE-2025-14293: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Dec 11, 2025
CVE-2025-13664: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Dec 11, 2025
CVE-2025-13663: Incorrect Execution-Assigned Permissions6.7 Medium5.4 Medium0%Dec 11, 2025
CVE-2025-55184: Deserialization of Untrusted Data7.5 HighN/A19%Dec 11, 2025
CVE-2025-55183: Undefined Security Weakness5.3 MediumN/A22%Dec 11, 2025
CVE-2025-36938: Protection Mechanism Failure6.8 MediumN/A0%Dec 11, 2025
CVE-2025-36937: Out-of-bounds Write9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-36936: Integer Overflow or Wraparound7.8 HighN/A0%Dec 11, 2025
CVE-2025-36935: Out-of-bounds Write7.8 HighN/A0%Dec 11, 2025
CVE-2025-36934: Concurrent Execution using Shared Resource with Improper Synchronization7.4 HighN/A0%Dec 11, 2025
CVE-2025-36932: Improper Input Validation7.8 HighN/A0%Dec 11, 2025
CVE-2025-36931: Buffer Copy without Checking Size of Input7.8 HighN/A0%Dec 11, 2025
CVE-2025-36930: Buffer Copy without Checking Size of Input7.8 HighN/A0%Dec 11, 2025
CVE-2025-36929: Improper Input Validation5.5 MediumN/A0%Dec 11, 2025
CVE-2025-36928: Buffer Copy without Checking Size of Input7.8 HighN/A0%Dec 11, 2025
CVE-2025-36927: Buffer Copy without Checking Size of Input7.8 HighN/A0%Dec 11, 2025
CVE-2025-36925: Out-of-bounds Write7.8 HighN/A0%Dec 11, 2025
80701-80725 of 744285