High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 458 of 556

  • 7.8 /10 High
    CVE-2026-84607 Auth required

    Apple - Race Condition

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a race condition caused by improper state management, letting sandboxed apps execute arbitrary code with kernel privileges, exploit requires sandboxed app execution.

  • 7.5 /10 High
    CVE-2026-84606 No auth

    Apple iOS - Privacy Violation

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 contain a privacy issue caused by improper handling of identifiers, letting apps identify users across reinstalls, exploit requires app installation.

  • 7.5 /10 High
    CVE-2026-84598

    Apple iOS & iPadOS - Path Traversal

    Apple iOS and iPadOS < 26.7 contain a path traversal caused by insufficient path validation, letting attackers with physical access to trust-paired devices read and write arbitrary files.

  • 8.4 /10 High
    CVE-2026-84584 Auth required

    Apple macOS Golden Gate - Sandbox Escape

    Apple macOS Golden Gate contains a sandbox escape vulnerability caused by improper handling of symlinks, letting local apps break out of their sandbox, exploit requires local app execution.

  • 8.4 /10 High
    CVE-2026-84581 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking in disk image mounting, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a malicious disk image.

  • 8.4 /10 High
    CVE-2026-84580 Auth required

    Apple macOS - Sandbox Escape

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by insufficient sandbox checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.8 /10 High
    CVE-2026-84578 Auth required

    Apple macOS - Broken Access Control

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape vulnerability caused by a logic issue with insufficient checks, letting applications break out of their sandbox, exploit requires app execution.

  • 8.2 /10 High
    CVE-2026-84577 No auth

    Apple macOS - Sandbox Restriction Bypass

    Apple macOS Golden Gate 27 and macOS Tahoe 26.7 contain a sandbox restriction bypass caused by insufficient sandbox enforcement, letting apps bypass sandbox restrictions, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84575 Auth required

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking when processing crafted files, letting attackers cause denial of service via app termination, exploit requires processing a malicious file.

  • 7.1 /10 High
    CVE-2026-84572 Auth required

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking, letting apps cause system termination or read kernel memory, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-84568 PoC public

    Apple macOS - Path Traversal & Remote Code Execution

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a path traversal caused by insufficient path validation, letting attackers with control of a network directory server execute arbitrary code with root privileges, exploit requires control of a network directory server.

  • 7.8 /10 High
    CVE-2026-84566 Auth required

    Apple - Out of Bounds Read/Write

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a memory corruption vulnerability caused by improper memory handling, letting local attackers cause system termination or kernel memory corruption, exploit requires local access.

  • 7.1 /10 High
    CVE-2026-84565 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking in disk image processing, letting attackers cause denial of service via app termination, exploit requires processing a malicious disk image.

  • 7.5 /10 High
    CVE-2026-84563 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a denial of service caused by a logic issue in system checks, letting apps cause unexpected system termination, exploit requires app execution.

  • 7.5 /10 High
    CVE-2026-84553 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a denial of service caused by insufficient input validation, letting remote attackers exhaust resources, exploit requires crafted input.