Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-40359: Use After Free7.8 HighN/A0%May 12, 2026
CVE-2026-40358: Use After Free8.4 HighN/A0%May 12, 2026
CVE-2026-40357: Deserialization of Untrusted Data8.8 HighN/A1%May 12, 2026
CVE-2026-35440: Files or Directories Accessible to External Parties5.5 MediumN/A0%May 12, 2026
CVE-2026-35439: Deserialization of Untrusted Data8.8 HighN/A1%May 12, 2026
CVE-2026-35436: Insufficient Granularity of Access Control8.8 HighN/A0%May 12, 2026
CVE-2026-33112: Deserialization of Untrusted Data8.8 HighN/A1%May 12, 2026
CVE-2026-33110: Deserialization of Untrusted Data8.8 HighN/A1%May 12, 2026
CVE-2026-21530: Double Free6.7 MediumN/A0%May 12, 2026
CVE-2026-32201: Improper Input Validation6.5 MediumN/A1%Apr 14, 2026
CVE-2026-32200: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-32199: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-32198: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-32197: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-32190: Use After Free8.4 HighN/A0%Apr 14, 2026
CVE-2026-32189: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-32188: Out-of-bounds Read7.1 HighN/A0%Apr 14, 2026
CVE-2026-23657: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-20945: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 14, 2026
CVE-2026-33115: Use After Free8.4 HighN/A0%Apr 14, 2026
CVE-2026-33114: Untrusted Pointer Dereference8.4 HighN/A0%Apr 14, 2026
CVE-2026-33822: Out-of-bounds Read6.1 MediumN/A0%Apr 14, 2026
CVE-2026-33095: Use After Free7.8 HighN/A0%Apr 14, 2026
CVE-2026-26144: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Mar 10, 2026
CVE-2026-26110: Access of Resource Using Incompatible Type8.4 HighN/A0%Mar 10, 2026
851-875 of 1993