The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112430: Apple macOS: An authentication issue was addressed with improved validation of user attributesN/AN/AN/AOct 26, 2026
CVE-2026-112429: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112428: Apple macOS: A logic issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-112427: Apple macOS: An authentication issue was addressed with improved state management8.1 HighN/AN/AOct 26, 2026
CVE-2026-112425: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112424: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112423: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112421: Apple macOS: A race condition was addressed with improved handling of symbolic linksN/AN/AN/AOct 26, 2026
CVE-2026-112417: Apple visionOS: An integer overflow was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-112416: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112415: Apple: An out-of-bounds write was addressed with improved input validation6.5 MediumN/AN/AOct 26, 2026
CVE-2026-112414: Apple: A stack overflow was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-112413: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112410: Apple macOS: A double free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2025-13833: Forescout Technologies SecureConnector: A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled…N/A7.7 HighN/AOct 26, 2026
CVE-2026-70382: WolfVision: Some externally supplied values stored by the device may be rendered in the web interface without sufficient output…4.1 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-70381: WolfVision: An access-control vulnerability has been identified in the web server configuration5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-70380: WolfVision: A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-65632: potatosalad jose: The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical lengthN/A5.1 MediumN/AOct 26, 2026
CVE-2026-65631: potatosalad jose: Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65630: potatosalad jose: Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-65629: potatosalad jose: Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a…N/A7.4 HighN/AOct 26, 2026
CVE-2026-65628: potatosalad jose: jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKsN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65627: potatosalad jose: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65626: potatosalad jose: The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracleN/A5.9 MediumN/AOct 26, 2026
926-950 of 522616