Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 693 of 695

  • 8.8 /10 High
    CVE-2026-30754 No auth

    FFmpeg - Buffer Overflow

    FFmpeg < 8.1 contains a buffer overflow caused by passing a negative size parameter to memcpy in nal_send function during RTP encoding of H.264/HEVC streams, letting attackers cause memory corruption via crafted input file.

  • 7.8 /10 High
    CVE-2026-28668 Auth required

    Unknown - Use After Free

    A use after free vulnerability exists in LimitRealloc of malloc_limit.cpp caused by a logic error, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-28666 Auth required

    LocalImageResolver - Denial of Service & Privilege Escalation

    LocalImageResolver.java contains a remote persistent denial of service caused by a DNG image rendering check bypass, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28664 Auth required

    Runtime_image - Broken Access Control

    Runtime_image WriteImageToDisk contains a file tampering vulnerability caused by a logic error, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28663 Auth required

    Android LauncherAppsService - Privilege Escalation

    LauncherAppsService in Android contains a background activity launch bypass caused by BAL bypass in buildIntentSenderForUser, letting local attackers escalate privileges without user interaction.

  • 8.0 /10 High
    CVE-2026-28662 Auth required

    p2p_process_prov_disc_bootstrap_req - Remote Code Execution

    p2p_process_prov_disc_bootstrap_req in p2p_pd.c contains a buffer overflow caused by out of bounds write, letting remote proximal attackers execute code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28659 Auth required

    MicroXR Blobstore - Broken Access Control

    MicroXR Blobstore contains a broken access control vulnerability caused by missing permission checks, letting local attackers escalate privileges by accessing other app's files, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28658 Auth required

    AccountsDb - Broken Access Control

    AccountsDb contains a broken access control vulnerability caused by a logic error in findMetaAuthUid, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28657 Auth required

    AppWidgetConfigActivityProxy - Broken Access Control

    AppWidgetConfigActivityProxy contains an unauthorized URI permission grant caused by a confused deputy in onActivityResult, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.3 /10 High
    CVE-2026-28656 Auth required

    DeviceAdminAdd - Clickjacking

    DeviceAdminAdd.java contains a tapjacking/overlay vulnerability caused by improper overlay handling in multiple functions, letting local attackers escalate privileges, exploit requires user interaction.

  • 7.8 /10 High
    CVE-2026-28655 Auth required

    Android RemoteViews - Privilege Escalation

    Android RemoteViews contains a background activity launch bypass caused by a logic error in multiple functions, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28653 Auth required

    rw_t3t.cc - Privilege Escalation

    rw_t3t.cc contains an out of bounds write caused by an integer overflow in multiple functions, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28650 Auth required

    WindowState - Broken Access Control

    WindowState.java contains a logic error in setHiddenWhileSuspended causing an overlay bypass, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28644 Auth required

    Android ActivityTaskManagerService - Broken Access Control

    Android ActivityTaskManagerService contains a permission bypass caused by a confused deputy in startNextMatchingActivity, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28642 Auth required

    ActivityStarter - Privilege Escalation

    ActivityStarter contains a logic error in executeRequest causing possible background activity launch, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.