The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118352: Google Chrome: Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118321: Google Chrome: Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…N/AN/AN/AOct 27, 2026
CVE-2026-118340: Google Chrome: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118354: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…N/AN/AN/AOct 27, 2026
CVE-2026-118329: Google Chrome: Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to…N/AN/AN/AOct 27, 2026
CVE-2026-118320: Google Chrome: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118317: Google Chrome: Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118305: Google Chrome: Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118339: Google Chrome: Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 27, 2026
CVE-2026-118350: Google Chrome: Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 27, 2026
CVE-2026-118357: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…N/AN/AN/AOct 27, 2026
CVE-2026-118344: Google Chrome: Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 27, 2026
CVE-2026-118348: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…N/AN/AN/AOct 27, 2026
CVE-2026-118331: Google Chrome: Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…N/AN/AN/AOct 27, 2026
CVE-2026-118306: Google Chrome: Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…N/AN/AN/AOct 27, 2026
CVE-2026-97045: golang.org/x/net golang.org/x/net/html: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML…N/AN/AN/AOct 27, 2026
CVE-2026-78661: golang.org/x/net golang.org/x/net/html: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string…N/AN/AN/AOct 27, 2026
CVE-2026-57203: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.9 MediumN/AOct 27, 2026
CVE-2026-57199: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-57192: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.0 MediumN/AOct 27, 2026
CVE-2026-57191: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A8.2 HighN/AOct 27, 2026
CVE-2026-57190: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.0 HighN/AOct 27, 2026
CVE-2026-57186: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-62765: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…7.5 HighN/AN/AOct 27, 2026
CVE-2026-57200: asterisk, certified-asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
876-900 of 413066