High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 528 of 552
- 8.6 /10 HighCVE-2026-75991 No auth
Illustrator - Remote Code Execution
Illustrator contains an improper input validation vulnerability caused by processing malicious files, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 8.6 /10 HighCVE-2026-75990 No auth
Illustrator - Broken Access Control
Illustrator contains an incorrect authorization vulnerability caused by improper access control, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-75863 No auth
Photoshop Desktop - Remote Code Execution
Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-75862 No auth
Adobe Photoshop Desktop - Remote Code Execution
Adobe Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-75771 No auth
Adobe Photoshop Desktop - Remote Code Execution
Adobe Photoshop Desktop contains an integer overflow caused by improper handling of file data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-75631 No auth
Adobe Photoshop Desktop - Remote Code Execution
Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 8.8 /10 HighCVE-2026-73028 Auth required
Microsoft SQL Server - Broken Access Control
Microsoft SQL Server contains a broken access control vulnerability that allows authorized attackers to elevate privileges over a network, exploit requires attacker to be authorized.
- 7.8 /10 HighCVE-2026-73026 Auth required
Windows Biometric Service - Privilege Escalation
Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local authorized access.
- 7.8 /10 HighCVE-2026-73024 Auth required
Windows Services for NFS ONCRPC XDR Driver - Privilege Escalation
Windows Services for NFS ONCRPC XDR Driver contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 8.8 /10 HighCVE-2026-73023 No auth
Windows Imaging Component - Remote Code Execution
Windows Imaging Component contains a heap-based buffer overflow allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 7.0 /10 HighCVE-2026-73022 Auth required
Windows Modern Device Management - Privilege Escalation
Windows Modern Device Management (MDM) contains a use after free vulnerability that allows an authorized attacker to elevate privileges locally, exploit requires attacker to have local access and authorization.
- 7.8 /10 HighCVE-2026-73021 Auth required
Windows Biometric Service - Privilege Escalation
Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.8 /10 HighCVE-2026-73020 Auth required
Windows Biometric Service - Privilege Escalation
Windows Biometric Service contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 8.8 /10 HighCVE-2026-73018 No auth
Graphic Fonts - Remote Code Execution
Graphic Fonts contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 7.5 /10 HighCVE-2026-73017 Auth required
Windows Graphics Kernel - Buffer Overflow
Windows Graphics Kernel contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers execute code locally, exploit requires local access with authorization.