The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-104344: Adobe: Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/A0%Oct 13, 2026
CVE-2026-104343: Adobe: Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/A0%Oct 13, 2026
CVE-2026-104342: Adobe: Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the…7.8 HighN/A0%Oct 13, 2026
CVE-2026-104341: Adobe: Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/A0%Oct 13, 2026
CVE-2026-104340: Adobe: Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/A0%Oct 13, 2026
CVE-2026-103967: Adobe: Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/A0%Oct 13, 2026
CVE-2026-103966: Adobe: Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/A0%Oct 13, 2026
CVE-2026-103937: misskey-dev misskey: Misskey is an open source, federated social media platformN/A8.7 High1%Oct 13, 2026
CVE-2026-103857: Adobe: Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory5.5 MediumN/A0%Oct 13, 2026
CVE-2026-103856: Adobe: Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory5.5 MediumN/A0%Oct 13, 2026
CVE-2026-103849: Adobe: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability…10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-103577: Microsoft: Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature…7.5 HighN/A1%Oct 13, 2026
CVE-2026-103576: Microsoft: Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an…6.5 MediumN/A1%Oct 13, 2026
CVE-2026-103572: Microsoft: Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server…8.8 HighN/A1%Oct 13, 2026
CVE-2026-103569: Microsoft: Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.7.5 HighN/A1%Oct 13, 2026
CVE-2026-103553: Microsoft: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.7.8 HighN/A0%Oct 13, 2026
CVE-2026-102870: Microsoft: Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute…8.8 HighN/A1%Oct 13, 2026
CVE-2026-102869: Microsoft: Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker…8.8 HighN/A1%Oct 13, 2026
CVE-2026-102867: Microsoft: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.6.5 MediumN/A1%Oct 13, 2026
CVE-2026-102866: Microsoft Microsoft SharePoint Server Subscription Edition: Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to…8.1 HighN/A1%Oct 13, 2026
CVE-2026-102865: Microsoft Microsoft SharePoint Server Subscription Edition: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a…6.5 MediumN/A1%Oct 13, 2026
CVE-2026-102864: Microsoft Microsoft SharePoint Server Subscription Edition: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint…4.6 MediumN/A0%Oct 13, 2026
CVE-2026-102863: Microsoft Microsoft SharePoint Server Subscription Edition: Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker…8.8 HighN/A1%Oct 13, 2026
CVE-2026-102862: Microsoft Microsoft SharePoint Server Subscription Edition: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a…8.8 HighN/A1%Oct 13, 2026
CVE-2026-102861: Microsoft Microsoft SharePoint Server Subscription Edition: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.8.8 HighN/A1%Oct 13, 2026
1126-1150 of 404453
‹›