The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-65385: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-65384: Apple macOS: An out-of-bounds read issue was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-65373: Apple macOS: A permissions issue was addressed with additional restrictionsN/AN/AN/AOct 26, 2026
CVE-2026-65368: Apple macOS: A logic issue was addressed with improved validationN/AN/AN/AOct 26, 2026
CVE-2026-65363: Apple: The issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-65350: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-64789: Apple macOS: This issue was addressed with improved validation of file attributesN/AN/AN/AOct 26, 2026
CVE-2026-64750: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-43736: Apple macOS: An authorization issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-116671: Xpdf: Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.N/A2.1 LowN/AOct 26, 2026
CVE-2026-116584: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.5 HighN/AN/AOct 26, 2026
CVE-2026-116583: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilitiesN/A5.3 MediumN/AOct 26, 2026
CVE-2026-116582: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities4.7 MediumN/AN/AOct 26, 2026
CVE-2026-116581: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.5 HighN/AN/AOct 26, 2026
CVE-2026-116580: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.3 HighN/AN/AOct 26, 2026
CVE-2026-116579: crossbario autobahn-python: Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio5.9 MediumN/AN/AOct 26, 2026
CVE-2026-116578: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking libraryN/A2.1 LowN/AOct 26, 2026
CVE-2026-116577: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking library5.3 MediumN/AN/AOct 26, 2026
CVE-2026-116576: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js7.8 HighN/AN/AOct 26, 2026
CVE-2026-116575: mem0ai mem0: Mem0 provides persistent memory infrastructure for AI agents and applications6.3 MediumN/AN/AOct 26, 2026
CVE-2026-116506: TOTOLINK A950RG: A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B202211049.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116505: TOTOLINK A950RG: A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B202211049.1 Critical8.5 HighN/AOct 26, 2026
CVE-2026-116504: TOTOLINK A950RG: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B202211049.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116502: turboderp-org ExLlamaV2: A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.24.4 Medium4.8 MediumN/AOct 26, 2026
CVE-2026-113952: Apple: A logic issue was addressed with improved checksN/AN/AN/AOct 26, 2026
101-125 of 416032