The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-39841: Out-of-bounds Write9.8 CriticalN/A0%Sep 19, 2025
CVE-2025-39840: Out-of-bounds Read7.1 HighN/A0%Sep 19, 2025
CVE-2025-39839: Out-of-bounds Read8.8 HighN/A0%Sep 19, 2025
CVE-2025-39837: Out-of-bounds Write7.8 HighN/A0%Sep 19, 2025
CVE-2025-8664: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Sep 19, 2025
CVE-2025-8532: Authorization Bypass Through User-Controlled Key6.4 MediumN/A0%Sep 19, 2025
CVE-2025-57528: Improper Input Validation7.7 HighN/A0%Sep 19, 2025
CVE-2025-10717: Improper Export of Android Application Components5.3 Medium1.9 Low0%Sep 19, 2025
CVE-2025-10716: Improper Export of Android Application Components5.3 Medium1.9 Low0%Sep 19, 2025
CVE-2025-58114: Improper Input Validation4.8 Medium5.9 Medium0%Sep 19, 2025
CVE-2025-57880: Improper Encoding or Escaping of Output5.4 Medium5.9 Medium0%Sep 19, 2025
CVE-2025-48007: Improper Encoding or Escaping of Output6.4 Medium5.9 Medium0%Sep 19, 2025
CVE-2025-46703: Improper Encoding or Escaping of Output6.4 Medium5.9 Medium0%Sep 19, 2025
CVE-2025-10715: Improper Export of Android Application Components5.3 Medium1.9 Low0%Sep 19, 2025
CVE-2025-10712: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 19, 2025
CVE-2025-7665: Missing Authorization8.1 HighN/A0%Sep 19, 2025
CVE-2025-10711: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Sep 19, 2025
CVE-2025-10710: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Sep 19, 2025
CVE-2025-9969: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 19, 2025
CVE-2025-10709: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Sep 19, 2025
CVE-2025-10708: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Sep 19, 2025
CVE-2025-10707: Improper Authorization6.3 Medium2.1 Low0%Sep 19, 2025
CVE-2025-10468: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Sep 19, 2025
CVE-2025-8531: Improper Handling of Length Parameter Inconsistency6.8 MediumN/A1%Sep 19, 2025
CVE-2025-10719: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Sep 19, 2025
86226-86250 of 559420