The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-44854: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44853: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44852: Release of Invalid Pointer or Reference9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41650: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41649: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41648: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41647: Incorrect Permission Assignment for Critical Resource9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41646: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41645: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41644: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38927: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38926: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38925: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38924: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38923: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38922: Out-of-bounds Write9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-38921: Use After Free9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-7875: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium1%Dec 6, 2024
CVE-2024-7874: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium1%Dec 6, 2024
CVE-2024-12326: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 6, 2024
CVE-2024-0139: Undefined Security Weakness4.4 MediumN/A0%Dec 6, 2024
CVE-2024-0130: Improper Authentication8.8 HighN/A0%Dec 6, 2024
CVE-2024-52324: Use of Inherently Dangerous Function9.8 Critical9.2 Critical1%Dec 6, 2024
CVE-2024-48874: Server-Side Request Forgery (SSRF)9.8 Critical9.3 Critical1%Dec 6, 2024
CVE-2024-47791: Improper Neutralization of Wildcards or Matching Symbols7.5 High8.7 High0%Dec 6, 2024
126051-126075 of 677876