Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-45471: Untrusted Pointer Dereference7.8 HighN/A0%Jun 9, 2026
CVE-2026-45472: Use After Free8.4 HighN/A0%Jun 9, 2026
CVE-2026-45475: Heap-based Buffer Overflow7.8 HighN/A0%Jun 9, 2026
CVE-2026-45469: Integer Underflow (Wrap or Wraparound)7.8 HighN/A0%Jun 9, 2026
CVE-2026-45468: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Jun 9, 2026
CVE-2026-45467: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Jun 9, 2026
CVE-2026-47294: Improper Neutralization of Special Elements used in an OS Command8.0 HighN/A1%Jun 1, 2026
CVE-2026-45659: Deserialization of Untrusted Data8.8 HighN/A3%May 22, 2026
CVE-2026-42832: Improper Access Control5.5 MediumN/A0%May 12, 2026
CVE-2026-42831: Heap-based Buffer Overflow7.8 HighN/A0%May 12, 2026
CVE-2026-41102: Improper Access Control5.5 MediumN/A0%May 12, 2026
CVE-2026-41101: Improper Access Control5.5 MediumN/A0%May 12, 2026
CVE-2026-40421: External Control of File Name or Path4.3 MediumN/A0%May 12, 2026
CVE-2026-40420: Improper Access Control8.8 HighN/A0%May 12, 2026
CVE-2026-40419: Use After Free7.8 HighN/A0%May 12, 2026
CVE-2026-40418: Use After Free7.8 HighN/A0%May 12, 2026
CVE-2026-40368: Deserialization of Untrusted Data8.0 HighN/A0%May 12, 2026
CVE-2026-40367: Untrusted Pointer Dereference8.4 HighN/A0%May 12, 2026
CVE-2026-40366: Use After Free8.4 HighN/A0%May 12, 2026
CVE-2026-40365: Insufficient Granularity of Access Control8.8 HighN/A0%May 12, 2026
CVE-2026-40364: Access of Resource Using Incompatible Type8.4 HighN/A0%May 12, 2026
CVE-2026-40363: Heap-based Buffer Overflow8.4 HighN/A0%May 12, 2026
CVE-2026-40362: Heap-based Buffer Overflow7.8 HighN/A0%May 12, 2026
CVE-2026-40361: Use After Free8.4 HighN/A0%May 12, 2026
CVE-2026-40360: Out-of-bounds Read7.8 HighN/A0%May 12, 2026
826-850 of 1993