The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-100822: User Interface (UI) Misrepresentation of Critical Information5.4 MediumN/A0%Sep 29, 2026
CVE-2026-100821: Origin Validation Error4.7 MediumN/A0%Sep 29, 2026
CVE-2026-100820: Improper Privilege Management8.8 HighN/A0%Sep 29, 2026
CVE-2026-100819: Improper Restriction of Operations within the Bounds of a Memory Buffer9.6 CriticalN/A0%Sep 29, 2026
CVE-2026-100818: Use After Free9.6 CriticalN/A0%Sep 29, 2026
CVE-2026-100817: Undefined Security Weakness5.4 MediumN/A0%Sep 29, 2026
CVE-2026-100816: Origin Validation Error8.1 HighN/A0%Sep 29, 2026
CVE-2026-100815: Use After Free8.8 HighN/A0%Sep 29, 2026
CVE-2026-100814: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Sep 29, 2026
CVE-2026-100813: Release of Invalid Pointer or Reference8.8 HighN/A0%Sep 29, 2026
CVE-2026-100812: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 29, 2026
CVE-2026-100811: Use After Free9.6 CriticalN/A0%Sep 29, 2026
CVE-2026-100810: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A0%Sep 29, 2026
CVE-2026-100809: Origin Validation Error8.1 HighN/A0%Sep 29, 2026
CVE-2026-100808: Protection Mechanism Failure8.8 HighN/A0%Sep 29, 2026
CVE-2026-100807: Improper Privilege Management8.8 HighN/A0%Sep 29, 2026
CVE-2026-100806: Use of Uninitialized Variable4.3 MediumN/A0%Sep 29, 2026
CVE-2026-100805: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A0%Sep 29, 2026
CVE-2026-100804: Use After Free9.6 CriticalN/A0%Sep 29, 2026
CVE-2026-100803: Origin Validation Error8.1 HighN/A0%Sep 29, 2026
CVE-2026-100802: Use of Uninitialized Variable4.3 MediumN/A0%Sep 29, 2026
CVE-2026-100801: Improper Privilege Management8.8 HighN/A0%Sep 29, 2026
CVE-2026-100800: Use After Free9.6 CriticalN/A0%Sep 29, 2026
CVE-2026-100799: Use of Uninitialized Variable4.3 MediumN/A0%Sep 29, 2026
CVE-2026-100798: Missing Cryptographic Step8.1 HighN/A0%Sep 29, 2026
101-125 of 2248