The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113234: Google Chrome: Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113316: Google Chrome: Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113141: Google Chrome: Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113284: Google Chrome: Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113236: Google Chrome: Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113315: Google Chrome: Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113298: Google Chrome: Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113253: Google Chrome: Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113163: Google Chrome: Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113104: Google Chrome: Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113188: Google Chrome: Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113117: Google Chrome: Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113339: Google Chrome: Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113058: Google Chrome: Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113097: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113101: Google Chrome: Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113271: Google Chrome: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-86413: curl: When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl…N/AN/AN/AOct 20, 2026
CVE-2026-86412: curl: A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reloadN/AN/AN/AOct 20, 2026
CVE-2026-86411: curl: An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy…N/AN/AN/AOct 20, 2026
CVE-2026-86410: curl: A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly…N/AN/AN/AOct 20, 2026
CVE-2026-86409: curl: Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and…N/AN/AN/AOct 20, 2026
CVE-2026-113869: Mozilla Thunderbird: When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while…5.4 MediumN/AN/AOct 20, 2026
CVE-2026-113868: Mozilla Thunderbird: When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-113867: Mozilla Thunderbird: Thunderbird did not escape attribute values when serializing outgoing XMPP stanzasN/AN/AN/AOct 20, 2026
1626-1650 of 407346