High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 471 of 552
- 7.8 /10 HighCVE-2026-89762
Linux Kernel AppArmor - Use After Free
Linux kernel AppArmor contains a use-after-free vulnerability caused by improper cred replacement in begin_current_label_crit_section(), letting attackers cause UAF via out-of-sync credentials during LSM hooks, exploit requires specific task cred override conditions.
- 7.8 /10 HighCVE-2026-89761 Auth required
Linux Kernel AppArmor - Out of Bounds Write
Linux kernel contains an out-of-bounds write vulnerability in AppArmor caused by improper null termination of label vectors in aa_vec_unique(), letting unprivileged attackers cause memory corruption via crafted label names, exploit requires loaded policy and access to /proc/self/attr/apparmor/current or securityfs .access file.
- 7.8 /10 HighCVE-2026-89760 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability caused by improper freeing of hibernation slots in the swap cache, letting attackers cause silent memory corruption, crashes, or data instability, exploit requires hibernation image preparation.
- 7.8 /10 HighCVE-2026-89758
Linux Kernel - Denial of Service
Linux kernel contains a memory management vulnerability caused by improper handling of non-present device-private PMDs in queue_folios_pmd(), letting attackers trigger kernel oops or VM_BUG_ON via HMM-based GPU driver migration, exploit requires GPU driver migration of anonymous THP folio.
- 7.8 /10 HighCVE-2026-89755 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in mm/migrate_device caused by stale mapping usage after freeing swapcache in __migrate_device_pages, letting attackers trigger folio reference count bugs, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-89754 Auth required
Linux Kernel - Out-of-Bounds Write
Linux kernel contains an out-of-bounds write caused by improper handling of walk->action in mm/pagewalk during walk_pmd_range(), letting local attackers trigger memory corruption, exploit requires local code execution.
- 7.8 /10 HighCVE-2026-89750 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free caused by improper reference handling of user_event_mm during fork duplication in tracing/user_events, letting attackers trigger memory corruption, exploit requires ability to fork processes.
- 7.8 /10 HighCVE-2026-89748 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in simple ring buffer reader swap caused by incorrect retry counter handling in simple_ring_buffer_swap_reader_page(), letting attackers cause ring buffer corruption, exploit requires kernel tracing enabled.
- 7.8 /10 HighCVE-2026-89747
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in trace_pipe caused by sub-buffer order change during ring buffer read, letting local attackers cause memory corruption, exploit requires concurrent trace_pipe reading and sub-buffer order change.
- 7.8 /10 HighCVE-2026-89746 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper handling of same-name hist triggers in tracing subsystem, letting local users cause kernel panic or crash, exploit requires writing specific hist triggers to tracefs.
- 8.4 /10 HighCVE-2026-89744 No auth
Linux Kernel - Denial of Service
Linux kernel contains an infinite loop vulnerability in fwnode_for_each_child_node() caused by incorrect handling of secondary fwnode children in fwnode_get_next_child_node(), letting attackers cause denial of service by infinite iteration, exploit requires crafted device tree nodes.
- 7.7 /10 HighCVE-2026-89743
Linux kernel misc: nsm - Information Disclosure
Linux kernel misc: nsm contains an out-of-bounds read caused by unbounded device-reported response length in nsm_sendrecv_msg_locked(), letting malicious backends disclose adjacent kernel heap, exploit requires malicious or buggy backend device.
- 7.8 /10 HighCVE-2026-89742 Auth required
Linux kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in rapidio mport_cdev dma_req_free() caused by dereferencing freed mapping after kref_put(), letting local userspace attackers cause memory corruption, exploit requires access to RapidIO mport character device.
- 7.8 /10 HighCVE-2026-89741
Linux Kernel - Memory Corruption & Denial of Service
Linux kernel contains a double-free vulnerability caused by improper error handling in __video_register_device(), letting attackers potentially cause memory corruption or denial of service, exploit requires triggering device registration failure.
- 7.8 /10 HighCVE-2026-89738 Auth required
Linux Kernel usb gadget at91_udc - Use After Free
Linux kernel usb gadget at91_udc contains a use-after-free vulnerability caused by a polled-VBUS timer and work item dereferencing freed memory during device removal, letting attackers cause system instability or denial of service, exploit requires device unbind or driver removal.