High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 648 of 725
- 8.8 /10 HighCVE-2026-89626 No auth
Linux Kernel HID Sensor Custom - Resource Cleanup Misconfiguration
Linux kernel HID sensor custom driver contains a resource cleanup flaw caused by incomplete sysfs group removal on failure in hid_sensor_custom_add_attributes(), letting attackers potentially cause resource leaks or instability, exploit requires kernel interaction with custom sensor fields.
- 7.8 /10 HighCVE-2026-89624 Auth required
Linux Kernel HID universal_pidff - Use After Free
Linux kernel HID universal_pidff contains a use-after-free vulnerability caused by not stopping the device when force-feedback initialization fails, letting attackers cause memory corruption, exploit requires a device with PID usage page and no input reports.
- 7.8 /10 HighCVE-2026-89622
Linux kernel HID mcp2221 - Use After Free
Linux kernel HID mcp2221 contains a use-after-free caused by not clearing the rxbuf pointer after I2C/SMBus transfer completion, letting attackers cause memory corruption via delayed device reports, exploit requires device interaction.
- 7.8 /10 HighCVE-2026-89620
Linux Kernel - Buffer Overflow
Linux kernel intel-thc-hid and intel-quickspi contain a heap buffer overflow caused by missing validation of report size before copying in write_cmd_to_txdma(), letting attackers with crafted HID reports overflow buffers, exploit requires access to hidraw SET_REPORT/SET_FEATURE ioctl.
- 7.8 /10 HighCVE-2026-89619 Auth required
Linux Kernel intel-thc-hid - Buffer Overflow
Linux kernel intel-thc-hid intel-quickspi contains a buffer overflow caused by copying device-supplied response without validating caller buffer length in quickspi_get_report, letting attackers cause memory corruption, exploit requires crafted device input.
- 7.8 /10 HighCVE-2026-89617 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel fs/ntfs3 contains a memory corruption vulnerability caused by lack of validation of dirty page table entries during log replay, letting attackers cause out-of-bounds memory access, exploit requires crafted NTFS log entries.
- 7.5 /10 HighCVE-2026-89616 No auth
Linux Kernel - Information Disclosure
Linux kernel contains an information disclosure vulnerability in fs/ntfs3 due to uninitialized memory leak on partial LZNT decompression in ni_read_frame(), letting local attackers leak kernel memory and defeat KASLR, exploit requires crafted compressed file.
- 8.4 /10 HighCVE-2026-89615 No auth
Linux kernel - Buffer Overflow
Linux kernel fs/ntfs3 contains a buffer overflow caused by improper bounds checking of page_lcns[] index in copy_lcns and redo shorten loops, letting attackers cause memory corruption, exploit requires crafted NTFS log record.
- 7.8 /10 HighCVE-2026-89609 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ecryptfs daemon queue cleanup caused by improper locking of msg ctx list, letting attackers cause potential denial of service or data corruption, exploit requires concurrent daemon message processing.
- 7.1 /10 HighCVE-2026-89608 Auth required
Linux kernel eCryptfs - Buffer Size Miscalculation
Linux kernel eCryptfs contains a buffer size miscalculation in ecryptfs_parse_packet_set causing potential buffer over-read, letting attackers cause memory corruption or denial of service, exploit requires crafted eCryptfs packets.
- 7.8 /10 HighCVE-2026-89607 Auth required
Linux Kernel eCryptfs - Buffer Overflow
Linux kernel eCryptfs contains a buffer overflow caused by lack of bounds checking on encrypted_key_size in parse_tag_3_packet, letting attackers cause out-of-bounds writes and memory corruption, exploit requires use of AES-192 cipher.
- 7.8 /10 HighCVE-2026-89606 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer underflow vulnerability in ecryptfs_parse_tag_70_packet caused by improper size calculation of tag 70 packets, letting attackers cause potential memory corruption, exploit requires crafted malformed packets.
- 7.8 /10 HighCVE-2026-89605 Auth required
Linux Kernel ecryptfs - Resource Management Flaw
Linux kernel ecryptfs contains a resource management flaw caused by improper handling of message context on send failure in ecryptfs_send_message_locked, letting attackers cause resource leaks, exploit requires triggering send failure.
- 8.4 /10 HighCVE-2026-89603
Linux Kernel - Race Condition
Linux kernel contains a race condition in seccomp filter handling with ptrace and TSYNC, allowing unprivileged processes to bypass seccomp filters and execute prohibited syscalls, exploit requires concurrent thread interaction.
- 7.8 /10 HighCVE-2026-89602 No auth
Linux Kernel erofs - Denial of Service
Linux kernel erofs contains a buffer resizing vulnerability caused by improper handling of global buffer resizing, letting attackers cause memory allocation errors or potential memory corruption, exploit requires kernel-level access.