Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 674 of 677

  • 7.3 /10 High
    CVE-2026-45528 Auth required

    StorageManagerService - Privilege Escalation

    StorageManagerService contains a privilege escalation caused by an unsafe PendingIntent in getManageSpaceActivityIntent, letting local attackers escalate privileges, exploit requires user interaction.

  • 7.8 /10 High
    CVE-2026-45520 Auth required

    BiometricsSettingsBase - Authentication Bypass

    BiometricsSettingsBase contains an authentication bypass caused by a confused deputy in onAttach, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-45515 Auth required

    a2dp_vendor_opus_decoder - Buffer Overflow

    a2dp_vendor_opus_decoder.cc contains a heap buffer overflow caused by out of bounds write in a2dp_vendor_opus_decoder_decode_packet, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-30754 No auth

    FFmpeg - Buffer Overflow

    FFmpeg < 8.1 contains a buffer overflow caused by passing a negative size parameter to memcpy in nal_send function during RTP encoding of H.264/HEVC streams, letting attackers cause memory corruption via crafted input file.

  • 7.8 /10 High
    CVE-2026-28668 Auth required

    Unknown - Use After Free

    A use after free vulnerability exists in LimitRealloc of malloc_limit.cpp caused by a logic error, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-28666 Auth required

    LocalImageResolver - Denial of Service & Privilege Escalation

    LocalImageResolver.java contains a remote persistent denial of service caused by a DNG image rendering check bypass, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28664 Auth required

    Runtime_image - Broken Access Control

    Runtime_image WriteImageToDisk contains a file tampering vulnerability caused by a logic error, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28663 Auth required

    Android LauncherAppsService - Privilege Escalation

    LauncherAppsService in Android contains a background activity launch bypass caused by BAL bypass in buildIntentSenderForUser, letting local attackers escalate privileges without user interaction.

  • 8.0 /10 High
    CVE-2026-28662 Auth required

    p2p_process_prov_disc_bootstrap_req - Remote Code Execution

    p2p_process_prov_disc_bootstrap_req in p2p_pd.c contains a buffer overflow caused by out of bounds write, letting remote proximal attackers execute code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28659 Auth required

    MicroXR Blobstore - Broken Access Control

    MicroXR Blobstore contains a broken access control vulnerability caused by missing permission checks, letting local attackers escalate privileges by accessing other app's files, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28658 Auth required

    AccountsDb - Broken Access Control

    AccountsDb contains a broken access control vulnerability caused by a logic error in findMetaAuthUid, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28657 Auth required

    AppWidgetConfigActivityProxy - Broken Access Control

    AppWidgetConfigActivityProxy contains an unauthorized URI permission grant caused by a confused deputy in onActivityResult, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.3 /10 High
    CVE-2026-28656 Auth required

    DeviceAdminAdd - Clickjacking

    DeviceAdminAdd.java contains a tapjacking/overlay vulnerability caused by improper overlay handling in multiple functions, letting local attackers escalate privileges, exploit requires user interaction.

  • 7.8 /10 High
    CVE-2026-28655 Auth required

    Android RemoteViews - Privilege Escalation

    Android RemoteViews contains a background activity launch bypass caused by a logic error in multiple functions, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28653 Auth required

    rw_t3t.cc - Privilege Escalation

    rw_t3t.cc contains an out of bounds write caused by an integer overflow in multiple functions, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.