Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-0891: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%Jan 13, 2026
CVE-2026-0890: Authentication Bypass by Spoofing5.4 MediumN/A0%Jan 13, 2026
CVE-2026-0889: Uncontrolled Resource Consumption7.5 HighN/A0%Jan 13, 2026
CVE-2026-0888: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jan 13, 2026
CVE-2026-0887: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Jan 13, 2026
CVE-2026-0886: Improper Restriction of Operations within the Bounds of a Memory Buffer5.3 MediumN/A0%Jan 13, 2026
CVE-2026-0885: Use After Free6.5 MediumN/A0%Jan 13, 2026
CVE-2026-0884: Use After Free9.8 CriticalN/A0%Jan 13, 2026
CVE-2026-0883: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jan 13, 2026
CVE-2026-0882: Use After Free8.8 HighN/A0%Jan 13, 2026
CVE-2026-0881: Improper Access Control10.0 CriticalN/A0%Jan 13, 2026
CVE-2026-0880: Integer Overflow or Wraparound8.8 HighN/A0%Jan 13, 2026
CVE-2026-0879: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Jan 13, 2026
CVE-2026-0878: Improper Input Validation8.0 HighN/A0%Jan 13, 2026
CVE-2026-0877: Protection Mechanism Failure8.1 HighN/A0%Jan 13, 2026
CVE-2025-14333: Out-of-bounds Write8.1 HighN/A0%Dec 9, 2025
CVE-2025-14332: Out-of-bounds Write7.3 HighN/A0%Dec 9, 2025
CVE-2025-14331: Origin Validation Error6.5 MediumN/A0%Dec 9, 2025
CVE-2025-14330: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Dec 9, 2025
CVE-2025-14329: Undefined Security Weakness8.8 HighN/A0%Dec 9, 2025
CVE-2025-14328: Undefined Security Weakness8.8 HighN/A0%Dec 9, 2025
CVE-2025-14327: Authentication Bypass by Spoofing7.5 HighN/A0%Dec 9, 2025
CVE-2025-14326: Use After Free9.8 CriticalN/A0%Dec 9, 2025
CVE-2025-14325: Access of Resource Using Incompatible Type7.3 HighN/A0%Dec 9, 2025
CVE-2025-14324: Improper Control of Generation of Code9.8 CriticalN/A0%Dec 9, 2025
901-925 of 2523