The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113009: Google Chrome: Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113008: Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113007: Google Chrome: Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-113006: Google Chrome: Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113005: Google Chrome: Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113004: Google Chrome: Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113003: Google Chrome: Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113002: Google Chrome: Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-113001: Google Chrome: Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113000: Google Chrome: Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112999: Google Chrome: Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112998: Google Chrome: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112997: Google Chrome: Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112996: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112995: Google Chrome: Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112994: Google Chrome: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112993: Google Chrome: Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112992: Google Chrome: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…9.6 CriticalN/AN/AOct 20, 2026
CVE-2026-111879: Improper LockingN/AN/AN/AOct 20, 2026
CVE-2026-108518: Access of Resource Using Incompatible Type ('Type Confusion')N/AN/AN/AOct 20, 2026
CVE-2026-101857: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101856: Oracle Corporation Oracle Order Management: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101855: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)6.5 MediumN/AN/AOct 20, 2026
CVE-2026-101854: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
CVE-2026-101853: Oracle Corporation Oracle Product Hub: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations)8.8 HighN/AN/AOct 20, 2026
1501-1525 of 417319