The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-125199: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125194: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm_dvd_encode_frame() in libavcodec/pcm-dvdenc.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125191: FFmpeg: FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2_buffers.c that allows attackers to deadlock the…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125189: FFmpeg: FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevc_metadata bitstream filter caused by a…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125187: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta_encode_frame() in…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125186: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in the dts2pts bitstream filter that…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125185: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in ff_aom_parse_film_grain_sets() that fails to reject…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125183: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in pps_3d_extension() in libavcodec/hevc/ps.c that…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125180: FFmpeg: FFmpeg 8.1 through 9.0.2 contains a memory exhaustion vulnerability in the libavcodec/exif.c parser that allows…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125174: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a NULL pointer dereference vulnerability in ff_hap_set_chunk_count()…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125173: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125104: FFmpeg: FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in ape_decode_frame() in libavcodec/apedec.c that fails…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125099: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the GEM raster image decoder in…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125095: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c,…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125073: FFmpeg: FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125072: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame() in…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125071: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/jvdec.c that allows attackers to…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125070: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqi_decode_frame() in libavcodec/eatqi.c,…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125069: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125068: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decode_frame()…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125067: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vble_decode_frame() in libavcodec/vble.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125066: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak (CLJR) decoder in…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125065: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tgv_decode_inter() in libavcodec/eatgv.c that…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125064: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726_decode_frame() in libavcodec/g726.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-112321: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on…7.5 HighN/AN/ANov 9, 2026
201-225 of 427771
‹›