Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 774 of 891

  • 7.5 /10 High
    CVE-2026-84598

    Apple iOS & iPadOS - Path Traversal

    Apple iOS and iPadOS < 26.7 contain a path traversal caused by insufficient path validation, letting attackers with physical access to trust-paired devices read and write arbitrary files.

  • 8.4 /10 High
    CVE-2026-84584 Auth required

    Apple macOS Golden Gate - Sandbox Escape

    Apple macOS Golden Gate contains a sandbox escape vulnerability caused by improper handling of symlinks, letting local apps break out of their sandbox, exploit requires local app execution.

  • 8.4 /10 High
    CVE-2026-84581 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking in disk image mounting, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a malicious disk image.

  • 8.4 /10 High
    CVE-2026-84580 Auth required

    Apple macOS - Sandbox Escape

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by insufficient sandbox checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.8 /10 High
    CVE-2026-84578 Auth required

    Apple macOS - Broken Access Control

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by a logic issue with insufficient checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.2 /10 High
    CVE-2026-84577 No auth

    Apple macOS - Sandbox Restriction Bypass

    Apple macOS Golden Gate 27 and macOS Tahoe 26.7 contain a sandbox restriction bypass caused by insufficient sandbox enforcement, letting apps bypass sandbox restrictions, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84575 Auth required

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking when processing crafted files, letting attackers cause denial of service via app termination, exploit requires processing a malicious file.

  • 7.1 /10 High
    CVE-2026-84572 Auth required

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking, letting apps cause system termination or read kernel memory, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84568 PoC public

    Apple macOS - Path Traversal & Remote Code Execution

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a path traversal caused by insufficient path validation, letting attackers with control of a network directory server execute arbitrary code with root privileges, exploit requires control of a network directory server.

  • 7.8 /10 High
    CVE-2026-84566 Auth required

    Apple - Out of Bounds Read/Write

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a memory corruption vulnerability caused by improper memory handling, letting local attackers cause system termination or kernel memory corruption, exploit requires local access.

  • 7.1 /10 High
    CVE-2026-84565 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking in disk image processing, letting attackers cause denial of service via app termination, exploit requires processing a malicious disk image.

  • 7.5 /10 High
    CVE-2026-84563 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a denial of service caused by a logic issue in system checks, letting apps cause unexpected system termination, exploit requires app execution.

  • 9.8 /10 Critical
    CVE-2026-84561 No auth

    Apple - Use After Free

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a use after free caused by improper memory management, letting apps cause system termination or kernel memory corruption, exploit requires app execution.

  • 7.5 /10 High
    CVE-2026-84553 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a denial of service caused by insufficient input validation, letting remote attackers exhaust resources, exploit requires crafted input.

  • 7.5 /10 High
    CVE-2026-84549 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking in NFS client, letting attackers cause system termination or kernel memory corruption, exploit requires connecting to malicious NFS server.