Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-20947: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Jan 13, 2026
CVE-2026-20963: Deserialization of Untrusted Data9.8 CriticalN/A6%Jan 13, 2026
CVE-2026-20959: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Jan 13, 2026
CVE-2026-20956: Untrusted Pointer Dereference7.8 HighN/A0%Jan 13, 2026
CVE-2026-20955: Untrusted Pointer Dereference7.8 HighN/A0%Jan 13, 2026
CVE-2026-20953: Use After Free8.4 HighN/A0%Jan 13, 2026
CVE-2026-20951: Improper Input Validation7.8 HighN/A0%Jan 13, 2026
CVE-2026-20946: Out-of-bounds Read7.8 HighN/A0%Jan 13, 2026
CVE-2026-20944: Out-of-bounds Read8.4 HighN/A0%Jan 13, 2026
CVE-2026-20943: Untrusted Search Path7.0 HighN/A0%Jan 13, 2026
CVE-2025-64672: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Dec 9, 2025
CVE-2025-62564: Out-of-bounds Read7.8 HighN/A0%Dec 9, 2025
CVE-2025-62563: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62562: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62561: Untrusted Pointer Dereference7.8 HighN/A0%Dec 9, 2025
CVE-2025-62560: Untrusted Pointer Dereference7.8 HighN/A0%Dec 9, 2025
CVE-2025-62559: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62558: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62557: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62556: Untrusted Pointer Dereference7.8 HighN/A0%Dec 9, 2025
CVE-2025-62555: Use After Free7.0 HighN/A0%Dec 9, 2025
CVE-2025-62554: Access of Resource Using Incompatible Type7.8 HighN/A0%Dec 9, 2025
CVE-2025-62553: Use After Free7.8 HighN/A0%Dec 9, 2025
CVE-2025-62552: Relative Path Traversal7.8 HighN/A0%Dec 9, 2025
CVE-2025-62216: Use After Free7.8 HighN/A0%Nov 11, 2025
901-925 of 1993