Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 764 of 767

  • 7.8 /10 High
    CVE-2026-49919 Auth required

    tt_face_colr_blend_layer - Integer Overflow

    tt_face_colr_blend_layer in ttcolr.c contains an integer overflow, letting remote attackers execute code and escalate privileges locally, exploit requires no additional privileges or user interaction.

  • 7.8 /10 High
    CVE-2026-49918 Auth required

    Unknown - Privilege Escalation

    Unknown product contains an out of bounds write caused by integer overflow in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-49887 Auth required

    InstallRepository - Broken Access Control

    InstallRepository.kt contains a permissions bypass in maybeRemoveInvalidInstallerPackageName, letting local attackers escalate privileges without additional execution privileges or user interaction.

  • 7.8 /10 High
    CVE-2026-49884 Auth required

    rw_mfc - Privilege Escalation

    rw_mfc contains an out of bounds write caused by incorrect bounds check in rw_mfc_handle_read_op, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-49882 Auth required

    rw_mfc_handle_read_op - Remote Code Execution

    rw_mfc_handle_read_op in rw_mfc.cc contains a heap buffer overflow causing a memory safety issue, letting remote attackers execute arbitrary code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-49881 PoC publicAuth required

    InCallController - Privilege Escalation

    InCallController contains a local privilege escalation caused by a logic error in serviceClassExists method, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-49879 Auth required

    rw_t3t.cc - Remote Code Execution

    rw_t3t.cc contains an out of bounds write caused by an integer overflow in multiple functions, letting remote attackers execute arbitrary code without additional privileges, exploit requires no user interaction.

  • 9.9 /10 Critical
    CVE-2026-48273 Auth required

    ColdFusion - Expression Language Injection

    ColdFusion contains an eval injection caused by improper neutralization of directives in dynamically evaluated code, letting low-privileged attackers execute arbitrary code in the context of the current user, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-45531 Auth required

    fsck - Privilege Escalation

    A vulnerability in read_boot_region of fsck.c contains an out of bounds read caused by a heap buffer overflow, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.3 /10 High
    CVE-2026-45528 Auth required

    StorageManagerService - Privilege Escalation

    StorageManagerService contains a privilege escalation caused by an unsafe PendingIntent in getManageSpaceActivityIntent, letting local attackers escalate privileges, exploit requires user interaction.

  • 7.8 /10 High
    CVE-2026-45520 Auth required

    BiometricsSettingsBase - Authentication Bypass

    BiometricsSettingsBase contains an authentication bypass caused by a confused deputy in onAttach, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-45515 Auth required

    a2dp_vendor_opus_decoder - Buffer Overflow

    a2dp_vendor_opus_decoder.cc contains a heap buffer overflow caused by out of bounds write in a2dp_vendor_opus_decoder_decode_packet, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-30754 No auth

    FFmpeg - Buffer Overflow

    FFmpeg < 8.1 contains a buffer overflow caused by passing a negative size parameter to memcpy in nal_send function during RTP encoding of H.264/HEVC streams, letting attackers cause memory corruption via crafted input file.

  • 7.8 /10 High
    CVE-2026-28668 Auth required

    Unknown - Use After Free

    A use after free vulnerability exists in LimitRealloc of malloc_limit.cpp caused by a logic error, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-28666 Auth required

    LocalImageResolver - Denial of Service & Privilege Escalation

    LocalImageResolver.java contains a remote persistent denial of service caused by a DNG image rendering check bypass, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.