The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-17518: ASUS Router: Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to…N/A8.2 HighN/AOct 20, 2026
CVE-2026-105299: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through…8.7 HighN/AN/AOct 20, 2026
CVE-2026-102438: ASUS: An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code…N/A8.5 HighN/AOct 20, 2026
CVE-2026-86981: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checking5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86979: Apple macOS: A privacy issue was addressed with improved checks5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86977: Apple iOS and iPadOS: An authorization issue was addressed with improved network restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-86976: Apple: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86975: Apple: An out-of-bounds read was addressed with improved bounds checking4.3 MediumN/AN/AOct 20, 2026
CVE-2026-86963: Apple iOS and iPadOS: A denial-of-service issue was addressed with improved input validation5.9 MediumN/AN/AOct 20, 2026
CVE-2026-86962: Apple: A double free issue was addressed with improved memory management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86961: Apple: A race condition was addressed with additional validation7.8 HighN/AN/AOct 20, 2026
CVE-2026-86959: Apple: An input validation issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86957: Apple: An out-of-bounds read was addressed with improved bounds checking6.5 MediumN/AN/AOct 20, 2026
CVE-2026-86955: Apple iOS and iPadOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86953: Apple: An out-of-bounds write issue was addressed with improved bounds checking4.6 MediumN/AN/AOct 20, 2026
CVE-2026-86949: Apple Xcode: This issue was addressed by enforcing library validation on the affected binaries8.8 HighN/AN/AOct 20, 2026
CVE-2026-86948: Apple Xcode: This issue was addressed by enforcing library validation on the affected binariesN/AN/AN/AOct 20, 2026
CVE-2026-86944: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-86935: Apple macOS: This issue was addressed by removing additional entitlementsN/AN/AN/AOct 20, 2026
CVE-2026-86933: Apple macOS: A permissions issue was addressed with additional sandbox restrictions3.3 LowN/AN/AOct 20, 2026
CVE-2026-86932: Apple macOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86928: Apple macOS: A path handling issue was addressed with improved validation5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86922: Apple: A type confusion issue was addressed with improved state management8.8 HighN/AN/AOct 20, 2026
CVE-2026-86921: Apple: A permissions issue was addressed with improved validation6.2 MediumN/AN/AOct 20, 2026
CVE-2026-86919: Apple: A stack overflow was addressed with improved input validation8.8 HighN/AN/AOct 20, 2026
201-225 of 407346
‹›