High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 104 of 552

  • 8.8 /10 High
    CVE-2026-110166 No auth

    Google Chrome - Buffer Overflow

    Google Chrome < 155.0.8059.79 contains a buffer overflow in Animation component, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-110164 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free caused by improper DOM handling, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.8 /10 High
    CVE-2026-110163 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in DOM, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.8 /10 High
    CVE-2026-110162 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in Desktop, caused by improper memory handling, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.3 /10 High
    CVE-2026-110158 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in Passwords component, letting remote attackers with compromised renderer process execute arbitrary code outside the sandbox via crafted HTML page.

  • 8.8 /10 High
    CVE-2026-110157 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in SVG, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.3 /10 High
    CVE-2026-110156 No auth

    Google Chrome - Remote Code Execution

    Google Chrome < 155.0.8059.79 contains a remote code execution caused by incorrect reference resolution in Extensions, letting remote attackers with compromised renderer process execute arbitrary code outside the sandbox, exploit requires compromised renderer process.

  • 8.8 /10 High
    CVE-2026-110155 No auth

    Google Chrome - Buffer Overflow

    Google Chrome < 155.0.8059.79 contains a buffer overflow in PDFium caused by improper handling of crafted HTML pages, letting remote attackers execute arbitrary code inside the sandbox, exploit requires crafted HTML page.

  • 8.8 /10 High
    CVE-2026-110154 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in Canvas, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.8 /10 High
    CVE-2026-110153 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free caused by improper memory handling in Media component, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML page.

  • 8.8 /10 High
    CVE-2026-110151 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in Media, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.8 /10 High
    CVE-2026-110148 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in SVG component, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML page, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-110147 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in PDF component caused by improper memory handling, letting remote attackers execute arbitrary code inside the sandbox via crafted HTML pages.

  • 8.3 /10 High
    CVE-2026-110145 No auth

    Google Chrome - Use After Free

    Google Chrome < 155.0.8059.79 contains a use after free vulnerability in Passwords, letting remote attackers who compromised the renderer process execute arbitrary code outside the sandbox via crafted HTML, exploit requires compromised renderer process.

  • 8.6 /10 High
    CVE-2026-110144 No auth

    Google Chrome - Authorization Bypass

    Google Chrome on Windows < 155.0.8059.79 contains an authorization bypass caused by incorrect authorization in Mojo, letting local attackers execute arbitrary code outside the sandbox, exploit requires local access.