The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-20788: Improper Access Control for Register Interface4.4 MediumN/A0%Dec 2, 2025
CVE-2025-20777: Out-of-bounds Write6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20776: Out-of-bounds Read6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20775: Use After Free6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20774: Heap-based Buffer Overflow6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20773: Use After Free6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20772: Use After Free6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20771: Use of Uninitialized Variable6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20770: Use After Free6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20769: Stack-based Buffer Overflow6.7 MediumN/A0%Dec 2, 2025
CVE-2025-20768: Out-of-bounds Read7.8 HighN/A0%Dec 2, 2025
CVE-2025-20767: Out-of-bounds Write7.8 HighN/A0%Dec 2, 2025
CVE-2025-20766: Use of Uninitialized Variable7.8 HighN/A0%Dec 2, 2025
CVE-2025-20765: Concurrent Execution using Shared Resource with Improper Synchronization4.7 MediumN/A0%Dec 2, 2025
CVE-2025-20764: Out-of-bounds Write7.8 HighN/A0%Dec 2, 2025
CVE-2025-20763: Out-of-bounds Write7.8 HighN/A0%Dec 2, 2025
CVE-2025-20759: Out-of-bounds Read6.5 MediumN/A0%Dec 2, 2025
CVE-2025-20758: Uncaught Exception4.9 MediumN/A0%Dec 2, 2025
CVE-2025-20757: Reachable Assertion6.5 MediumN/A0%Dec 2, 2025
CVE-2025-20756: Improper Validation of Specified Type of Input6.5 MediumN/A0%Dec 2, 2025
CVE-2025-20755: NULL Pointer Dereference5.3 MediumN/A0%Dec 2, 2025
CVE-2025-20754: Uncaught Exception5.3 MediumN/A0%Dec 2, 2025
CVE-2025-20753: Uncaught Exception5.3 MediumN/A0%Dec 2, 2025
CVE-2025-20752: Reachable Assertion6.5 MediumN/A0%Dec 2, 2025
CVE-2025-20751: Out-of-bounds Write6.5 MediumN/A0%Dec 2, 2025
81426-81450 of 398159