High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 459 of 556

  • 7.5 /10 High
    CVE-2026-84549 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking in NFS client, letting attackers cause system termination or kernel memory corruption, exploit requires connecting to malicious NFS server.

  • 7.1 /10 High
    CVE-2026-84548 No auth

    Apple macOS - Integer Overflow

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by integer overflow due to insufficient input validation, letting attackers cause memory corruption, exploit requires crafted malicious document.

  • 8.4 /10 High
    CVE-2026-84546 No auth

    Apple - Out of Bounds Write

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking when processing maliciously crafted 3D models, letting attackers cause memory corruption, exploit requires processing a crafted 3D model.

  • 7.5 /10 High
    CVE-2026-84544

    Apple macOS - Integer Overflow

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an integer overflow caused by insufficient input validation when connecting to a malicious NFS server, letting attackers cause system termination or kernel memory corruption, exploit requires connection to malicious NFS server.

  • 7.5 /10 High
    CVE-2026-84543 PoC publicNo auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a denial of service caused by out-of-bounds access in SMB client, letting attackers cause system termination or kernel memory corruption, exploit requires connecting to a malicious SMB server.

  • 8.2 /10 High
    CVE-2026-84535 No auth

    Apple macOS - Broken Access Control

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a broken access control caused by improper state management, letting sandboxed apps escape their sandbox, exploit requires app execution within sandbox.

  • 8.1 /10 High
    CVE-2026-84516 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking when processing crafted files, letting attackers cause app termination or memory disclosure, exploit requires crafted file.

  • 7.8 /10 High
    CVE-2026-84515 Auth required

    Apple macOS - Out of Bounds Write

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an out-of-bounds write caused by insufficient bounds checking in SMB client, letting attackers cause kernel memory corruption by connecting to a malicious SMB server.

  • 8.8 /10 High
    CVE-2026-84512 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking when mounting disk images, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a crafted disk image.

  • 7.8 /10 High
    CVE-2026-84511 No auth

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking in asset catalog processing, letting attackers cause denial of service via process termination, exploit requires processing a malicious asset catalog.

  • 7.8 /10 High
    CVE-2026-84507 Auth required

    Apple - Race Condition

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a race condition caused by improper state handling, letting apps cause system termination or kernel memory corruption, exploit requires malicious app.

  • 7.8 /10 High
    CVE-2026-84506 Auth required

    Apple macOS - Use After Free

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a use after free vulnerability caused by improper memory management, letting local apps execute arbitrary code with kernel privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84505 Auth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking, letting local apps gain root privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84497 No auth

    Apple - Buffer Overflow

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 contain a buffer overflow caused by insufficient size validation when opening crafted files, letting attackers cause denial of service via process termination, exploit requires opening a malicious file.

  • 8.8 /10 High
    CVE-2026-82794 Auth required

    SolarView Compact - Command Injection

    SolarView Compact contains a command injection caused by improper input handling in Schedule Settings, letting logged-in attackers execute arbitrary OS commands.