Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 559 of 677

  • 7.5 /10 High
    CVE-2026-84629 No auth

    Apple iOS - Information Disclosure

    Apple iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 contain an information disclosure vulnerability caused by insufficient entitlement checks, letting apps fingerprint users, exploit requires app installation.

  • 9.1 /10 Critical
    CVE-2026-84625 No auth

    Apple - Broken Access Control

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, visionOS 27, and watchOS 27 contain a broken access control caused by insufficient sandbox restrictions, letting apps fingerprint users, exploit requires app installation.

  • 7.5 /10 High
    CVE-2026-84623 No auth

    Apple iOS & iPadOS - Broken Access Control

    Apple iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27 contain an authorization issue caused by improper state management, letting apps fingerprint the device, exploit requires app installation.

  • 7.3 /10 High
    CVE-2026-84620 Auth required

    Apple - Integer Overflow

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an integer overflow caused by improper input validation in 3D model processing, letting attackers cause memory corruption, exploit requires processing a maliciously crafted 3D model.

  • 7.3 /10 High
    CVE-2026-84611 Auth required

    Apple - Out of Bounds Write

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking in 3D model processing, letting attackers cause memory corruption, exploit requires processing a maliciously crafted 3D model.

  • 9.8 /10 Critical
    CVE-2026-84609 No auth

    Apple - Broken Access Control

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a broken access control caused by insufficient path validation, letting apps modify protected system files, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84607 Auth required

    Apple - Race Condition

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a race condition caused by improper state management, letting sandboxed apps execute arbitrary code with kernel privileges, exploit requires sandboxed app execution.

  • 7.5 /10 High
    CVE-2026-84606 No auth

    Apple iOS - Privacy Violation

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 contain a privacy issue caused by improper handling of identifiers, letting apps identify users across reinstalls, exploit requires app installation.

  • 7.5 /10 High
    CVE-2026-84598

    Apple iOS & iPadOS - Path Traversal

    Apple iOS and iPadOS < 26.7 contain a path traversal caused by insufficient path validation, letting attackers with physical access to trust-paired devices read and write arbitrary files.

  • 8.4 /10 High
    CVE-2026-84584 Auth required

    Apple macOS Golden Gate - Sandbox Escape

    Apple macOS Golden Gate contains a sandbox escape vulnerability caused by improper handling of symlinks, letting local apps break out of their sandbox, exploit requires local app execution.

  • 8.4 /10 High
    CVE-2026-84581 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking in disk image mounting, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a malicious disk image.

  • 8.4 /10 High
    CVE-2026-84580 Auth required

    Apple macOS - Sandbox Escape

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by insufficient sandbox checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.8 /10 High
    CVE-2026-84578 Auth required

    Apple macOS - Broken Access Control

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by a logic issue with insufficient checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.2 /10 High
    CVE-2026-84577 No auth

    Apple macOS - Sandbox Restriction Bypass

    Apple macOS Golden Gate 27 and macOS Tahoe 26.7 contain a sandbox restriction bypass caused by insufficient sandbox enforcement, letting apps bypass sandbox restrictions, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84575 Auth required

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking when processing crafted files, letting attackers cause denial of service via app termination, exploit requires processing a malicious file.