Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 800 of 891

  • 8.2 /10 High
    CVE-2026-89632 No auth

    Linux Kernel smb client - Use-After-Check

    Linux kernel contains a use-after-check vulnerability in smb client reparse_buf_ptr() caused by reading ReparseDataLength before validating buffer length, letting remote attackers cause memory corruption, exploit requires crafted server response.

  • 9.1 /10 Critical
    CVE-2026-89631 No auth

    Linux kernel smb client - Out of Bounds Read

    Linux kernel smb client contains a buffer overflow caused by improper bounds checking of tree connect response byte count in CIFSTCon(), letting attackers cause memory corruption, exploit requires crafted server response.

  • 9.1 /10 Critical
    CVE-2026-89630 No auth

    Linux Kernel smb client - Broken Access Control

    Linux kernel smb client contains a broken access control vulnerability caused by incorrect data_offset bound check in is_valid_oplock_break(), letting attackers bypass read overflow protections, exploit requires crafted SMB messages.

  • 8.8 /10 High
    CVE-2026-89626 No auth

    Linux Kernel HID Sensor Custom - Resource Cleanup Misconfiguration

    Linux kernel HID sensor custom driver contains a resource cleanup flaw caused by incomplete sysfs group removal on failure in hid_sensor_custom_add_attributes(), letting attackers potentially cause resource leaks or instability, exploit requires kernel interaction with custom sensor fields.

  • 7.8 /10 High
    CVE-2026-89624 Auth required

    Linux Kernel HID universal_pidff - Use After Free

    Linux kernel HID universal_pidff contains a use-after-free vulnerability caused by not stopping the device when force-feedback initialization fails, letting attackers cause memory corruption, exploit requires a device with PID usage page and no input reports.

  • 7.8 /10 High
    CVE-2026-89622

    Linux kernel HID mcp2221 - Use After Free

    Linux kernel HID mcp2221 contains a use-after-free caused by not clearing the rxbuf pointer after I2C/SMBus transfer completion, letting attackers cause memory corruption via delayed device reports, exploit requires device interaction.

  • 7.8 /10 High
    CVE-2026-89620

    Linux Kernel - Buffer Overflow

    Linux kernel intel-thc-hid and intel-quickspi contain a heap buffer overflow caused by missing validation of report size before copying in write_cmd_to_txdma(), letting attackers with crafted HID reports overflow buffers, exploit requires access to hidraw SET_REPORT/SET_FEATURE ioctl.

  • 7.8 /10 High
    CVE-2026-89619 Auth required

    Linux Kernel intel-thc-hid - Buffer Overflow

    Linux kernel intel-thc-hid intel-quickspi contains a buffer overflow caused by copying device-supplied response without validating caller buffer length in quickspi_get_report, letting attackers cause memory corruption, exploit requires crafted device input.

  • 7.8 /10 High
    CVE-2026-89617 Auth required

    Linux Kernel - Out of Bounds Read/Write

    Linux kernel fs/ntfs3 contains a memory corruption vulnerability caused by lack of validation of dirty page table entries during log replay, letting attackers cause out-of-bounds memory access, exploit requires crafted NTFS log entries.

  • 7.5 /10 High
    CVE-2026-89616 No auth

    Linux Kernel - Information Disclosure

    Linux kernel contains an information disclosure vulnerability in fs/ntfs3 due to uninitialized memory leak on partial LZNT decompression in ni_read_frame(), letting local attackers leak kernel memory and defeat KASLR, exploit requires crafted compressed file.

  • 8.4 /10 High
    CVE-2026-89615 No auth

    Linux kernel - Buffer Overflow

    Linux kernel fs/ntfs3 contains a buffer overflow caused by improper bounds checking of page_lcns[] index in copy_lcns and redo shorten loops, letting attackers cause memory corruption, exploit requires crafted NTFS log record.

  • 9.8 /10 Critical
    CVE-2026-89614 No auth

    Linux Kernel - Out of Bounds Read

    Linux kernel ntfs contains an out-of-bounds read caused by improper bounding of the free-cluster bitmap scan in ntfs_cluster_alloc, letting attackers trigger kernel memory corruption, exploit requires crafted NTFS volume with oversized $Bitmap.

  • 9.8 /10 Critical
    CVE-2026-89613 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a denial of service caused by accepting invalid empty mapping pairs in NTFS attributes with inconsistent highest VCN and size, letting attackers cause system instability, exploit requires crafted NTFS attribute.

  • 9.8 /10 Critical
    CVE-2026-89612 No auth

    Linux kernel - Out of Bounds Read

    Linux kernel contains an out-of-bounds read caused by improper handling of NTFS boot sector MFT LCNs, letting attackers trigger memory corruption via crafted high-bit values, exploit requires crafted NTFS boot sector.

  • 9.8 /10 Critical
    CVE-2026-89611 No auth

    Linux Kernel ntfs - Memory Corruption

    Linux kernel ntfs subsystem contains a buffer overflow vulnerability caused by improper validation of non-resident attribute name offsets during conversion between non-sparse and sparse attributes, letting attackers cause memory corruption, exploit requires crafted malicious MFT record.