The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121408: FreeRDP: FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel because FindChannelById returns a…5.3 Medium6.0 MediumN/ANov 3, 2026
CVE-2026-121407: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121406: FreeRDP: FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121404: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121403: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121402: FreeRDP: FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121401: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121400: FreeRDP: FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121399: FreeRDP: FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121398: FreeRDP: FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module…5.9 Medium8.2 HighN/ANov 3, 2026
CVE-2026-121397: FreeRDP: FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121396: FreeRDP: FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121395: FreeRDP: FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121394: FreeRDP: FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121393: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121392: FreeRDP: FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that…7.4 High9.1 CriticalN/ANov 3, 2026
CVE-2026-121391: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121390: FreeRDP: FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121389: FreeRDP: FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious…3.1 Low2.3 LowN/ANov 3, 2026
CVE-2026-121388: FreeRDP: FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-121387: FreeRDP: FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121386: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and…7.5 High8.7 HighN/ANov 3, 2026
CVE-2026-118527: Ivanti Connect Secure: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-118489: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users — the…7.5 HighN/AN/ANov 3, 2026
CVE-2026-106991: n/a: hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control7.1 HighN/AN/ANov 3, 2026
201-225 of 528356
‹›