Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 89 of 677
- 7.0 /10 HighCVE-2026-83666 Auth required
Active Directory Certificate Services - Privilege Escalation
Active Directory Certificate Services contains a race condition caused by concurrent execution using shared resources with improper synchronization, letting authorized local attackers elevate privileges.
- 7.5 /10 HighCVE-2026-83665 No auth
Windows DHCP Server - Denial of Service
Windows DHCP Server contains a null pointer dereference caused by improper handling of network requests, letting unauthorized attackers cause denial of service over a network, exploit requires network access.
- 9.3 /10 CriticalCVE-2026-83662 No auth
Adobe Experience Manager - Reflected XSS
Adobe Experience Manager contains a reflected XSS caused by improper input sanitization, letting attackers inject malicious scripts to gain elevated access or control, exploit requires victim interaction with crafted URL or page.
- 7.8 /10 HighCVE-2026-83661 No auth
Photoshop Desktop - Integer Overflow
Photoshop Desktop contains an integer overflow caused by improper handling of input data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-83659 Auth required
Windows User Profile Service - Privilege Escalation
Windows User Profile Service contains a privilege escalation caused by improper link resolution before file access, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.5 /10 HighCVE-2026-83655 No auth
Network Policy Server - Denial of Service
Network Policy Server contains an out-of-bounds read vulnerability allowing unauthorized attackers to cause denial of service over a network, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-83654 Auth required
Windows Modern Device Management - Broken Access Control
Windows Modern Device Management contains a broken access control caused by missing authentication for a critical function, letting authorized attackers elevate privileges locally, exploit requires attacker to be authorized.
- 7.8 /10 HighCVE-2026-83652 Auth required
Windows NTFS - Privilege Escalation
Windows NTFS contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.
- 7.8 /10 HighCVE-2026-83650 Auth required
Windows Media - Privilege Escalation
Windows Media contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.5 /10 HighCVE-2026-83647 No auth
Active Directory Domain Services - Denial of Service
Active Directory Domain Services contains an out-of-bounds read vulnerability allowing unauthorized attackers to cause denial of service over a network, exploit requires network access.
- 7.5 /10 HighCVE-2026-83645 No auth
Active Directory Federation Services - Denial of Service
Active Directory Federation Services contains a denial of service vulnerability caused by allocation of resources without limits or throttling, letting unauthorized attackers deny service over a network, exploit requires network access.
- 7.0 /10 HighCVE-2026-83644 Auth required
Windows Audio Service - Privilege Escalation
Windows Audio Service contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption in the service.
- 8.8 /10 HighCVE-2026-83643 No auth
Windows Error Reporting - Buffer Overflow
Windows Error Reporting contains a stack-based buffer overflow allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 8.8 /10 HighCVE-2026-83642 No auth
DNS Server - Remote Code Execution
DNS Server contains a type confusion vulnerability caused by access of resource using incompatible type, letting unauthorized attackers execute code remotely, exploit requires network access.
- 7.8 /10 HighCVE-2026-83641 Auth required
Windows Media - Privilege Escalation
Windows Media contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.