The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-86928: Apple macOS: A path handling issue was addressed with improved validation5.5 MediumN/A0%Oct 20, 2026
CVE-2026-86922: Apple: A type confusion issue was addressed with improved state management8.8 HighN/A0%Oct 20, 2026
CVE-2026-86921: Apple: A permissions issue was addressed with improved validation6.2 MediumN/A0%Oct 20, 2026
CVE-2026-86919: Apple: A stack overflow was addressed with improved input validation8.8 HighN/A0%Oct 20, 2026
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checking4.3 MediumN/A0%Oct 20, 2026
CVE-2026-86915: Apple macOS: A race condition was addressed with improved locking4.7 MediumN/A0%Oct 20, 2026
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state management5.5 MediumN/A0%Oct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory management5.4 MediumN/A0%Oct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checks4.4 MediumN/A0%Oct 20, 2026
CVE-2026-86875: Apple Xcode: An input validation issue was addressed with improved input validation4.3 MediumN/A0%Oct 20, 2026
CVE-2026-86874: Apple Xcode: An out-of-bounds read was addressed with improved input validation3.3 LowN/A0%Oct 20, 2026
CVE-2026-86872: Apple: A logic issue was addressed with improved state management5.4 MediumN/A0%Oct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validation5.9 MediumN/A0%Oct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checking6.5 MediumN/A0%Oct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictionsN/AN/A0%Oct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checksN/AN/A0%Oct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validation3.5 LowN/A0%Oct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's access5.5 MediumN/A0%Oct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state management2.0 LowN/A0%Oct 20, 2026
CVE-2026-77938: letta-ai letta: Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server…6.5 Medium7.1 High0%Oct 20, 2026
CVE-2026-77937: letta-ai letta: Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users…8.1 High8.6 High0%Oct 20, 2026
CVE-2026-77936: letta-ai letta: Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never…9.8 Critical9.3 Critical0%Oct 20, 2026
CVE-2026-77935: coze-dev coze-studio: Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows…8.3 High8.7 High0%Oct 20, 2026
CVE-2026-77934: coze-dev coze-studio: Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands…8.8 High8.7 High1%Oct 20, 2026
2176-2200 of 417319
‹›