Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 854 of 891

  • 7.0 /10 High
    CVE-2026-83940 Auth required

    Windows Device Association Service - Privilege Escalation

    Windows Device Association Service contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 8.2 /10 High
    CVE-2026-83939 Auth required

    Windows Secure Kernel Mode - Privilege Escalation

    Windows Secure Kernel Mode contains a privilege escalation caused by untrusted pointer dereference, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.8 /10 High
    CVE-2026-83498 Auth required

    Windows Virtualization-Based Security Enclave - Privilege Escalation

    Windows Virtualization-Based Security (VBS) Enclave contains a privilege escalation caused by untrusted pointer dereference, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-82537 No auth

    Roo-Code - Command Injection

    Roo-Code through 3.54.0 contains a command injection caused by a word-boundary mismatch in comment handling between the approval gate's shell parser and bash, letting attackers execute denied shell commands with auto-execute privileges, exploit requires crafted command string with allowlisted word followed by hash and denied command.

  • 8.8 /10 High
    CVE-2026-82536 No auth

    Roo-Code - Command Injection

    Roo-Code <= 3.54.0 contains an auto-approve bypass caused by omission of the bash pipe operator in shell command parsing, letting attackers execute denied shell commands with agent privileges, exploit requires crafted command line.

  • 7.8 /10 High
    CVE-2026-82007 No auth

    Adobe Photoshop Desktop - Integer Overflow

    Adobe Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-82006 No auth

    Photoshop Desktop - Remote Code Execution

    Photoshop Desktop contains a heap-based buffer overflow caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-82005 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 10.0 /10 Critical
    CVE-2026-82004 No auth

    Adobe Campaign Classic - OS Command Injection

    Adobe Campaign Classic contains an OS Command Injection caused by improper neutralization of special elements, letting attackers execute arbitrary code in the context of the current user, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-81996 Auth required

    Acrobat Reader - Broken Access Control

    Acrobat Reader contains an incorrect authorization vulnerability caused by improper access control, letting low-privileged attackers escalate privileges, exploit requires no user interaction.

  • 8.2 /10 High
    CVE-2026-81994 No auth

    Acrobat Reader - Prototype Pollution

    Acrobat Reader contains a prototype pollution vulnerability caused by improperly controlled modification of object prototype attributes, letting attackers read arbitrary files, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-81992 No auth

    Acrobat Reader - Remote Code Execution

    Acrobat Reader contains a heap-based buffer overflow caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-81990 No auth

    Acrobat Reader - Use After Free

    Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-81989 No auth

    Acrobat Reader - Use After Free

    Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-81988 No auth

    Acrobat Reader - Use After Free

    Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.