The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-86981: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checking5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86979: Apple macOS: A privacy issue was addressed with improved checks5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86977: Apple iOS and iPadOS: An authorization issue was addressed with improved network restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-86976: Apple: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86975: Apple: An out-of-bounds read was addressed with improved bounds checking4.3 MediumN/AN/AOct 20, 2026
CVE-2026-86963: Apple iOS and iPadOS: A denial-of-service issue was addressed with improved input validation5.9 MediumN/AN/AOct 20, 2026
CVE-2026-86962: Apple: A double free issue was addressed with improved memory management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86959: Apple: An input validation issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86957: Apple: An out-of-bounds read was addressed with improved bounds checking6.5 MediumN/AN/AOct 20, 2026
CVE-2026-86955: Apple iOS and iPadOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86953: Apple: An out-of-bounds write issue was addressed with improved bounds checking4.6 MediumN/AN/AOct 20, 2026
CVE-2026-86948: Apple Xcode: This issue was addressed by enforcing library validation on the affected binariesN/AN/AN/AOct 20, 2026
CVE-2026-86944: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-86940: Apple macOS: This issue was addressed by removing the vulnerable codeN/AN/AN/AOct 20, 2026
CVE-2026-86935: Apple macOS: This issue was addressed by removing additional entitlementsN/AN/AN/AOct 20, 2026
CVE-2026-86932: Apple macOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86928: Apple macOS: A path handling issue was addressed with improved validation5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86922: Apple: A type confusion issue was addressed with improved state management8.8 HighN/AN/AOct 20, 2026
CVE-2026-86921: Apple: A permissions issue was addressed with improved validation6.2 MediumN/AN/AOct 20, 2026
CVE-2026-86872: Apple: A logic issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checksN/AN/AN/AOct 20, 2026
CVE-2026-77936: letta-ai letta: Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-77930: EvoScientist: EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell…8.8 High8.7 HighN/AOct 20, 2026
176-200 of 407346
‹›