Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 865 of 891

  • 7.8 /10 High
    CVE-2026-75863 No auth

    Photoshop Desktop - Remote Code Execution

    Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-75862 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-75771 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 9.1 /10 Critical
    CVE-2026-75746 Auth required

    ColdFusion - SQL Injection

    ColdFusion contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers with high privileges execute arbitrary code, exploit requires high privileges.

  • 7.8 /10 High
    CVE-2026-75631 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 8.8 /10 High
    CVE-2026-73028 Auth required

    Microsoft SQL Server - Broken Access Control

    Microsoft SQL Server contains a broken access control vulnerability that allows authorized attackers to elevate privileges over a network, exploit requires attacker to be authorized.

  • 7.8 /10 High
    CVE-2026-73026 Auth required

    Windows Biometric Service - Privilege Escalation

    Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local authorized access.

  • 9.8 /10 Critical
    CVE-2026-73025 No auth

    Windows iSCSI - Authentication Bypass

    Windows iSCSI contains a broken authentication caused by weak authentication mechanisms, letting unauthorized attackers bypass security features over a network, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-73024 Auth required

    Windows Services for NFS ONCRPC XDR Driver - Privilege Escalation

    Windows Services for NFS ONCRPC XDR Driver contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-73023 No auth

    Windows Imaging Component - Remote Code Execution

    Windows Imaging Component contains a heap-based buffer overflow allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.

  • 7.0 /10 High
    CVE-2026-73022 Auth required

    Windows Modern Device Management - Privilege Escalation

    Windows Modern Device Management (MDM) contains a use after free vulnerability that allows an authorized attacker to elevate privileges locally, exploit requires attacker to have local access and authorization.

  • 7.8 /10 High
    CVE-2026-73021 Auth required

    Windows Biometric Service - Privilege Escalation

    Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.8 /10 High
    CVE-2026-73020 Auth required

    Windows Biometric Service - Privilege Escalation

    Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-73018 No auth

    Graphic Fonts - Remote Code Execution

    Graphic Fonts contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-73017 Auth required

    Windows Graphics Kernel - Buffer Overflow

    Windows Graphics Kernel contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers execute code locally, exploit requires local access with authorization.