The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121403: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121402: FreeRDP: FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121401: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121400: FreeRDP: FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121399: FreeRDP: FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121398: FreeRDP: FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module…5.9 Medium8.2 HighN/ANov 3, 2026
CVE-2026-121397: FreeRDP: FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121396: FreeRDP: FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121395: FreeRDP: FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121394: FreeRDP: FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121393: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121392: FreeRDP: FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that…7.4 High9.1 CriticalN/ANov 3, 2026
CVE-2026-121391: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121390: FreeRDP: FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121388: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121387: FreeRDP: FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121386: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and…7.5 High8.7 HighN/ANov 3, 2026
CVE-2026-118489: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users — the…7.5 HighN/AN/ANov 3, 2026
CVE-2026-118488: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an…5.9 MediumN/AN/ANov 3, 2026
CVE-2026-110265: runZero Platform: A specially crafted malformed search query could return results from outside a user's organization6.5 MediumN/AN/ANov 3, 2026
CVE-2026-106991: n/a: hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control7.1 HighN/AN/ANov 3, 2026
CVE-2026-100493: AMD AMD Compressionator SDK: An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-73328: volmarg personal-management-system: Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-121562: CTFd: CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that…5.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-121561: HumanSignal: Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that…7.7 High6.3 MediumN/ANov 3, 2026
76-100 of 528356
‹›