Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 570 of 677

  • 7.5 /10 High
    CVE-2026-43789 No auth

    Apple macOS - Information Disclosure

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an information disclosure vulnerability caused by insufficient sandbox restrictions, letting apps access user-sensitive data, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-43786 PoC publicAuth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a privilege escalation caused by missing entitlement checks, letting apps gain root privileges, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-43783 PoC publicAuth required

    Apple macOS Tahoe - Privilege Escalation

    Apple macOS Tahoe 26.6 contains a race condition caused by improper locking, letting malicious apps gain root privileges, exploit requires malicious app execution.

  • 7.8 /10 High
    CVE-2026-43702 No auth

    Apple - Buffer Overflow

    Apple iOS 26.6, 26.7, iPadOS 26.6, 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, 26.7, tvOS 26.6, and watchOS 26.6 contain a buffer overflow caused by processing a maliciously crafted video file, letting attackers cause app termination or memory corruption, exploit requires crafted video file.

  • 7.1 /10 High
    CVE-2026-43697 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by improper bounds checking when processing maliciously crafted 3D files, letting attackers cause memory corruption, exploit requires crafted 3D file.

  • 8.8 /10 High
    CVE-2026-43692 No auth

    Apple macOS - Remote Code Execution

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a remote code execution caused by insufficient input sanitization, letting remote attackers cause app termination or execute arbitrary code, exploit requires crafted input.

  • 7.8 /10 High
    CVE-2026-43691 Auth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a privilege escalation caused by a path handling issue due to insufficient validation, letting local apps gain root privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-43689 Auth required

    Apple iOS & macOS - Privilege Escalation

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 contain a privilege escalation caused by insufficient permissions restrictions, letting malicious apps gain root privileges, exploit requires malicious app execution.

  • 7.8 /10 High
    CVE-2026-43688 No auth

    Apple iOS & iPadOS & macOS Golden Gate - Denial of Service

    Apple iOS 27, iPadOS 27, and macOS Golden Gate 27 contain a memory corruption caused by insufficient input validation when processing maliciously crafted files, letting attackers cause denial of service, exploit requires crafted malicious file.

  • 8.8 /10 High
    CVE-2026-43686 No auth

    Apple iOS & macOS - Use After Free

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a use-after-free vulnerability caused by improper memory management when connecting to a malicious NFS server, letting attackers cause kernel memory corruption, exploit requires connection to a malicious NFS server.

  • 7.8 /10 High
    CVE-2026-43684 Auth required

    Apple iOS & macOS - Use After Free

    Apple iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8 contain a use-after-free vulnerability caused by improper memory management, letting apps cause system termination or kernel memory corruption, exploit requires malicious app.

  • 7.1 /10 High
    CVE-2026-43683 Auth required

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking, letting apps cause process termination or disclose process memory, exploit requires app execution.

  • 7.5 /10 High
    CVE-2026-33963 Auth required

    Samsung Mobile Processor Exynos - Denial of Service

    Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 contain a stack-based buffer overflow caused by malformed messages sent to the camera driver, letting attackers cause denial of service remotely, exploit requires sending malformed message.

  • 7.7 /10 High
    CVE-2026-31278 PoC publicAuth required

    Suprema BioStar - Information Disclosure

    Suprema BioStar 2 < 2.9.12 and BioStar X < 1.0.2 contain an information disclosure vulnerability caused by improper protection of Active Directory service account credentials in /api/v2/setting/adserversetting endpoint, letting attackers obtain credentials in cleartext via crafted GET request, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-28960 No auth

    Apple iOS & iPadOS - Denial of Service

    Apple iOS and iPadOS < 18.7.10 contain a denial-of-service caused by insufficient validation, letting remote attackers cause service disruption, exploit requires crafted requests.