The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-14408: Out-of-bounds Read3.3 LowN/A0%Dec 23, 2025
CVE-2025-14407: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A0%Dec 23, 2025
CVE-2025-14406: Uncontrolled Search Path Element7.8 HighN/A0%Dec 23, 2025
CVE-2025-14405: Uncontrolled Search Path Element6.8 MediumN/A0%Dec 23, 2025
CVE-2025-14404: Product UI does not Warn User of Unsafe Actions7.0 HighN/A0%Dec 23, 2025
CVE-2025-14403: Product UI does not Warn User of Unsafe Actions7.8 HighN/A0%Dec 23, 2025
CVE-2025-14402: Product UI does not Warn User of Unsafe Actions7.0 HighN/A0%Dec 23, 2025
CVE-2025-14401: Out-of-bounds Read7.8 HighN/A0%Dec 23, 2025
CVE-2025-13716: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13715: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13714: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13713: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13712: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13711: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13710: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13709: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13708: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13707: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13706: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-13703: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Dec 23, 2025
CVE-2025-13700: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A2%Dec 23, 2025
CVE-2025-13699: Improper Limitation of a Pathname to a Restricted Directory7.0 HighN/A0%Dec 23, 2025
CVE-2025-13698: Improper Limitation of a Pathname to a Restricted Directory4.5 MediumN/A1%Dec 23, 2025
CVE-2025-12840: Heap-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
CVE-2025-12839: Heap-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
90151-90175 of 530113