The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-48504: AMD: Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a…N/A6.8 MediumN/ANov 10, 2026
CVE-2025-29941: AMD: Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could…N/A6.0 MediumN/ANov 10, 2026
CVE-2026-0003: AMD: Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-0435: AMD: Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could…N/A6.0 MediumN/ANov 10, 2026
CVE-2026-0454: AMD: An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-0480: AMD: Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…N/A6.0 MediumN/ANov 10, 2026
CVE-2026-28248: AMD: Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-28247: AMD: Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV)…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-28249: AMD: Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-40668: AMD: Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-40669: AMD: An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor…N/A4.0 MediumN/ANov 10, 2026
CVE-2026-40670: AMD: Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-0027: AMD: Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-29940: AMD: Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-52537: AMD: Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-52535: AMD: Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54506: AMD: A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54503: AMD: Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54508: AMD: Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54504: AMD: Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-62620: AMD: Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-62621: AMD: Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-92544: Kong Inc.: SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute…N/A8.7 HighN/ANov 10, 2026
CVE-2026-82012: Out-of-bounds Write7.8 HighN/AN/ANov 10, 2026
CVE-2026-126128: Auth0 Auth0 Node JS: The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its…N/AN/AN/ANov 10, 2026
1151-1175 of 433023