High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 330 of 568

  • 7.8 /10 High
    CVE-2026-91811 No auth

    Foxit PDF Editor/Reader - Out of Bounds Write

    Foxit PDF Editor/Reader contains a buffer overflow caused by insufficient validation of vertex indices in triangular fan texture meshes in the PRC parser, letting attackers cause memory corruption and application crash, exploit requires crafted malicious file.

  • 7.8 /10 High
    CVE-2026-91809 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by improper validation during field-name traversal in malformed PDF form fields, letting attackers cause application crashes, exploit requires crafted PDF files.

  • 7.8 /10 High
    CVE-2026-91806 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by embedded JavaScript accessing released PDF form-field references, letting attackers cause application crash, exploit requires crafted PDF with malicious JavaScript.

  • 7.8 /10 High
    CVE-2026-91805 No auth

    Foxit PDF Editor/Reader - Use After Free

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by page-structure changes during rendering in PDF page-tree handling, letting attackers cause memory corruption and application crash, exploit requires crafted PDF.

  • 7.8 /10 High
    CVE-2026-91804 No auth

    Foxit PDF Editor/Reader - Out of Bounds Write

    Foxit PDF Editor/Reader contains a heap-based out-of-bounds write caused by insufficient validation of Circle annotation appearance geometry in rendering malformed Cloudy appearance streams, letting attackers cause memory corruption and crashes, exploit requires crafted PDF file.

  • 8.8 /10 High
    CVE-2026-91803 Auth required

    Foxit PDF Editor/Reader - Privilege Escalation

    Foxit PDF Editor/Reader contains a local privilege escalation caused by unsafe loading of dynamic-link libraries from user-writable directories during high-privilege operations, letting local attackers execute code with elevated privileges.

  • 7.8 /10 High
    CVE-2026-91802 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability caused by improper handling of bitmap stride and target buffer formats in WebP image decoding, letting attackers cause application crash, exploit requires crafted WebP image.

  • 7.8 /10 High
    CVE-2026-91801 No auth

    Foxit PDF Editor/Reader - Path Traversal

    Foxit PDF Editor/Reader contains a path traversal caused by insufficient validation of embedded PDF resource file paths, letting attackers write files outside intended locations, potentially enabling arbitrary code execution, exploit requires crafted PDF file.

  • 8.8 /10 High
    CVE-2026-91800 Auth required

    Foxit PDF Editor - Privilege Escalation

    Foxit PDF Editor for macOS contains a local privilege escalation caused by insufficient validation of a user-modifiable configuration value during high-privilege upgrades, letting local attackers execute arbitrary commands with root privileges.

  • 7.8 /10 High
    CVE-2026-91799 No auth

    Foxit PDF Editor/Reader - Use After Free

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by improper handling of JavaScript array objects, letting attackers cause crashes or execute arbitrary code via crafted PDFs, exploit requires opening malicious PDF.

  • 8.8 /10 High
    CVE-2026-91798 Auth required

    Foxit PDF Editor/Reader - Privilege Escalation

    Foxit PDF Editor/Reader contains a local privilege escalation caused by insecure permission configuration in the update daemon, letting local attackers execute arbitrary scripts with higher privileges, exploit requires local access.

  • 7.8 /10 High
    CVE-2026-91797 No auth

    Foxit PDF Editor/Reader - Path Traversal

    Foxit PDF Editor/Reader contains a path traversal vulnerability caused by improper validation of attachment file names, letting attackers write malicious attachments outside the secure directory when the PDF is opened, exploit requires user to open the PDF.

  • 7.8 /10 High
    CVE-2026-91795 No auth

    Foxit PDF Editor/Reader - Remote Code Execution

    Foxit PDF Editor/Reader contains a buffer overflow caused by inadequate validation of encryption metadata in FileOpen plugin, letting attackers execute arbitrary code via specially crafted PDF files, exploit requires crafted PDF file.

  • 7.8 /10 High
    CVE-2026-91794 No auth

    Foxit PDF Editor/Reader - Out-of-Bounds Write

    Foxit PDF Editor/Reader contains an out-of-bounds write vulnerability caused by insufficient boundary validation in the PDF rendering process when handling malformed color space data, letting remote attackers cause crashes and potentially execute code.

  • 7.8 /10 High
    CVE-2026-91793 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by executing scripts that modify annotation rich-text attributes with malformed font data, letting attackers cause application crashes, exploit requires opening a crafted PDF.