The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-59623: Google Android: In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59619: Google Android: In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table…N/AN/AN/ANov 10, 2026
CVE-2026-59618: Google Android: In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent…N/AN/AN/ANov 10, 2026
CVE-2026-59614: Google Android: In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on…N/AN/AN/ANov 10, 2026
CVE-2026-59613: Google Android: In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59611: Google Android: In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59609: Google Android: In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier…N/AN/AN/ANov 10, 2026
CVE-2026-59607: Google Android: In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic…N/AN/AN/ANov 10, 2026
CVE-2026-59606: Google Android: In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure…N/AN/AN/ANov 10, 2026
CVE-2026-59604: Google Android: In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic…N/AN/AN/ANov 10, 2026
CVE-2026-59603: Google Android: In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59601: Google Android: In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-59599: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 10, 2026
CVE-2026-59598: Google Android: In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after freeN/AN/AN/ANov 10, 2026
CVE-2026-59597: Google Android: In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management…N/AN/AN/ANov 10, 2026
CVE-2026-59595: Google Android: In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59594: Google Android: In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow7.8 HighN/AN/ANov 10, 2026
CVE-2026-59587: Google Android: In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of…N/AN/AN/ANov 10, 2026
CVE-2026-59586: Google Android: In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to…N/AN/AN/ANov 10, 2026
CVE-2026-59585: Google Android: In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check7.5 HighN/AN/ANov 10, 2026
CVE-2026-59583: Google Android: In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via…N/AN/AN/ANov 10, 2026
CVE-2026-59582: Google Android: In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due…7.5 HighN/AN/ANov 10, 2026
CVE-2026-59580: Google Android: In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a…N/AN/AN/ANov 10, 2026
CVE-2026-59579: Google Android: In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-59575: Google Android: In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds…N/AN/AN/ANov 10, 2026
1201-1225 of 433023