The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-58934: Google Android: In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error…8.4 HighN/A0%Nov 2, 2026
CVE-2026-58933: Google Android: In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code5.3 MediumN/A0%Nov 2, 2026
CVE-2026-58886: Google Android: In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the codeN/AN/A0%Nov 2, 2026
CVE-2026-58885: Google Android: In multiple locations, there is a possible permission bypass due to a confused deputy8.4 HighN/A0%Nov 2, 2026
CVE-2026-58884: Google Android: In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy8.4 HighN/A0%Nov 2, 2026
CVE-2026-58883: Google Android: In multiple locations, there is a possible denial of service due to a logic error in the codeN/AN/A0%Nov 2, 2026
CVE-2026-58882: Google Android: In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflowN/AN/A0%Nov 2, 2026
CVE-2026-58879: Google Android: In descramble of multiple files, there is a possible out-of-bounds write due to improper casting8.4 HighN/A0%Nov 2, 2026
CVE-2026-58877: Google Android: In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused…4.0 MediumN/A0%Nov 2, 2026
CVE-2026-58876: Google Android: In multiple locations, there is a possible memory safety issue due to a use-after-freeN/AN/A0%Nov 2, 2026
CVE-2026-58875: Google Android: In multiple locations, there is a possible denial of service due to improper input validation6.2 MediumN/A0%Nov 2, 2026
CVE-2026-58871: Google Android: In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow8.4 HighN/A0%Nov 2, 2026
CVE-2026-58870: Google Android: In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing…N/AN/A0%Nov 2, 2026
CVE-2026-58868: Google Android: In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflowN/AN/A0%Nov 2, 2026
CVE-2026-58867: Google Android: In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check8.4 HighN/A0%Nov 2, 2026
CVE-2026-58866: Google Android: In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI…8.4 HighN/A0%Nov 2, 2026
CVE-2026-58857: Google Android: In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race conditionN/AN/A0%Nov 2, 2026
CVE-2026-58847: Google Android: In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code8.4 HighN/A0%Nov 2, 2026
CVE-2026-58845: Google Android: In multiple locations, there is a possible out of bounds write due to an integer overflow8.4 HighN/A0%Nov 2, 2026
CVE-2026-58844: Google Android: In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check8.4 HighN/A0%Nov 2, 2026
CVE-2026-58838: Google Android: In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validationN/AN/A0%Nov 2, 2026
CVE-2026-58837: Google Android: In multiple locations, there is a possible background activity launch due to a logic error in the code8.4 HighN/A0%Nov 2, 2026
CVE-2026-58836: Google Android: In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass…7.8 HighN/A0%Nov 2, 2026
CVE-2026-58829: Google Android: In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free8.4 HighN/A0%Nov 2, 2026
CVE-2026-58828: Google Android: In multiple functions of base.c, there is a possible use-after-free due to a race condition8.4 HighN/A0%Nov 2, 2026
1026-1050 of 419095
‹›