Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 802 of 891
- 8.4 /10 HighCVE-2026-89588 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains a buffer over-read caused by incorrect ARM section length accounting in ghes_handle_arm_hw_error(), letting attackers potentially read beyond CPER section, exploit requires crafted error data.
- 7.8 /10 HighCVE-2026-89587 Auth required
Linux Kernel - Buffer Overflow
Linux kernel contains a stack buffer overflow in ACPI pfr_update's query_capability() caused by unchecked memcpy of firmware-supplied buffers larger than destination arrays, letting local attackers cause memory corruption, exploit requires local access.
- 8.2 /10 HighCVE-2026-89586 No auth
Linux Kernel - Denial of Service
Linux kernel contains a broken TRIM command handling vulnerability in ata_scsi_write_same_xlat due to incorrect sizing of DSM TRIM descriptors for sector sizes larger than 2048 bytes, letting attackers cause TRIM commands to fail on 4Kn devices, exploit requires usage of devices with large logical sector sizes.
- 7.8 /10 HighCVE-2026-89585 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by scheduling backlight work before charlcd device registration, letting attackers cause system instability or denial of service, exploit requires specific kernel configuration.
- 7.8 /10 HighCVE-2026-89584 Auth required
Linux Kernel - Misconfiguration
Linux kernel contains a validation bypass caused by improper checking of user space vectors alignment in bio-based and stacking block drivers, letting attackers cause errors or crashes, exploit requires crafted bio vectors.
- 8.1 /10 HighCVE-2026-89583 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read in Bluetooth eir_get_service_data() caused by incorrect length calculation in advertising data parsing, letting attackers cause memory disclosure via ISO broadcast sink, exploit requires crafted periodic advertising reports.
- 7.8 /10 HighCVE-2026-89581 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a privilege escalation caused by incorrect per-CPU address resolution in BPF x86 extended registers, letting attackers cause kernel panic and memory corruption, exploit requires running BPF programs with GCC-compiled per-CPU addresses.
- 7.8 /10 HighCVE-2026-89580 Auth required
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by a preemptible BPF program reusing a per-CPU perf_callchain_entry buffer during __bpf_get_stack(), letting attackers cause out-of-bounds write, exploit requires running a preemptible BPF program.
- 7.8 /10 HighCVE-2026-89579 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a local privilege escalation vulnerability in bpf bloom filter sizing and indexing on 32-bit kernels caused by under-allocation and incorrect bit indexing, letting local attackers with CAP_BPF escalate privileges.
- 7.8 /10 HighCVE-2026-89574 Auth required
Linux Kernel dm array - Out of Bounds Read
Linux kernel dm array contains a validation bypass caused by insufficient checks on array block headers, letting attackers potentially cause out-of-bounds reads, exploit requires crafted dm array metadata.
- 7.8 /10 HighCVE-2026-89573
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by dm array accepting array blocks with mismatched value sizes, letting attackers cause inconsistent metadata processing, exploit requires crafted metadata.
- 7.1 /10 HighCVE-2026-89571 Auth required
Linux Kernel - Out of Bounds Read & Denial of Service
Linux kernel contains a buffer overflow caused by improper bounds checking of fwctl command payload in cxl/features, letting attackers cause out-of-bounds memory read and kernel crash, exploit requires crafted fwctl command with manipulated op_size.
- 7.8 /10 HighCVE-2026-89570 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper lifetime management of the CXL MCE notifier in cxl/mce, letting attackers trigger NULL dereferences and use-after-free in the MCE handler, exploit requires specific hardware with CXL regions having extended linear cache.
- 8.8 /10 HighCVE-2026-89569 No auth
Linux Kernel Bluetooth RFCOMM - Use After Free
Linux kernel Bluetooth RFCOMM contains a use-after-free vulnerability caused by unsynchronized access to session and DLC lists in rfcomm_security_cfm(), letting local attackers cause memory corruption, exploit requires concurrent session teardown.
- 7.8 /10 HighCVE-2026-89564 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by orphaning prefetched skbs before multicast forwarding, letting attackers cause kernel memory corruption or denial of service, exploit requires multicast packet forwarding.