The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113002: Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113001: Google Chrome: Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113000: Google Chrome: Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112999: Google Chrome: Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112998: Google Chrome: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112997: Google Chrome: Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112996: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112995: Google Chrome: Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112994: Google Chrome: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112993: Google Chrome: Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112992: Google Chrome: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-111879: Improper LockingN/AN/AN/AOct 20, 2026
CVE-2026-108518: Access of Resource Using Incompatible Type ('Type Confusion')N/AN/AN/AOct 20, 2026
CVE-2026-101857: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101856: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101855: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101854: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101853: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101852: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101851: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI)7.1 HighN/AN/AOct 20, 2026
CVE-2026-101850: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI)6.1 MediumN/AN/AOct 20, 2026
CVE-2026-101849: Oracle Corporation Installed Base: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance)7.6 HighN/AN/AOct 20, 2026
CVE-2026-101847: Oracle Corporation Oracle Bills of Material: Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations)7.5 HighN/AN/AOct 20, 2026
CVE-2026-101846: Oracle Corporation Oracle Purchasing: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)3.5 LowN/AN/AOct 20, 2026
CVE-2026-101845: Oracle Corporation Oracle Purchasing: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)3.1 LowN/AN/AOct 20, 2026
1151-1175 of 417319