The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118338: Google Chrome: Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118337: Google Chrome: Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin…N/AN/AN/AOct 27, 2026
CVE-2026-118336: Google Chrome: Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118335: Google Chrome: Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118334: Google Chrome: Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118333: Google Chrome: Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin…N/AN/AN/AOct 27, 2026
CVE-2026-118331: Google Chrome: Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118330: Google Chrome: Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118329: Google Chrome: Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118328: Google Chrome: Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118327: Google Chrome: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118322: Google Chrome: Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory…N/AN/AN/AOct 27, 2026
CVE-2026-118320: Google Chrome: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118319: Google Chrome: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory…N/AN/AN/AOct 27, 2026
CVE-2026-118318: Google Chrome: Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a…N/AN/AN/AOct 27, 2026
CVE-2026-118317: Google Chrome: Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118315: Google Chrome: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118314: Google Chrome: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118313: Google Chrome: Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118311: Google Chrome: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118307: Google Chrome: Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118304: Google Chrome: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 27, 2026
CVE-2026-118128: a2aproject a2a-js: A vulnerability has been found in a2aproject a2a-js up to 1.1.06.5 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-112155: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
CVE-2026-111563: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
826-850 of 413066