High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 77 of 552

  • 7.0 /10 High
    CVE-2026-83675 Auth required

    Windows Kernel - Privilege Escalation

    Windows Kernel contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 8.1 /10 High
    CVE-2026-83674 No auth

    Active Directory Federation Services - Authentication Bypass

    Active Directory Federation Services contains a broken authentication caused by weak authentication mechanisms, letting unauthorized attackers perform spoofing over a network, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83670 No auth

    Microsoft Windows - Information Disclosure

    Microsoft Windows contains an out-of-bounds read vulnerability in Function Discovery Service (fdwsd.dll), letting unauthorized attackers disclose information over a network, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-83669 Auth required

    Windows Error Reporting - Privilege Escalation

    Windows Error Reporting contains a privilege escalation caused by use of uninitialized resource, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-83666 Auth required

    Active Directory Certificate Services - Privilege Escalation

    Active Directory Certificate Services contains a race condition caused by concurrent execution using shared resources with improper synchronization, letting authorized local attackers elevate privileges.

  • 7.5 /10 High
    CVE-2026-83665 No auth

    Windows DHCP Server - Denial of Service

    Windows DHCP Server contains a null pointer dereference caused by improper handling of network requests, letting unauthorized attackers cause denial of service over a network, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-83661 No auth

    Photoshop Desktop - Integer Overflow

    Photoshop Desktop contains an integer overflow caused by improper handling of input data, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-83659 Auth required

    Windows User Profile Service - Privilege Escalation

    Windows User Profile Service contains a privilege escalation caused by improper link resolution before file access, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.5 /10 High
    CVE-2026-83655 No auth

    Network Policy Server - Denial of Service

    Network Policy Server contains an out-of-bounds read vulnerability allowing unauthorized attackers to cause denial of service over a network, exploit requires no special privileges.

  • 7.8 /10 High
    CVE-2026-83654 Auth required

    Windows Modern Device Management - Broken Access Control

    Windows Modern Device Management contains a broken access control caused by missing authentication for a critical function, letting authorized attackers elevate privileges locally, exploit requires attacker to be authorized.

  • 7.8 /10 High
    CVE-2026-83652 Auth required

    Windows NTFS - Privilege Escalation

    Windows NTFS contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 7.8 /10 High
    CVE-2026-83650 Auth required

    Windows Media - Privilege Escalation

    Windows Media contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.5 /10 High
    CVE-2026-83647 No auth

    Active Directory Domain Services - Denial of Service

    Active Directory Domain Services contains an out-of-bounds read vulnerability allowing unauthorized attackers to cause denial of service over a network, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83645 No auth

    Active Directory Federation Services - Denial of Service

    Active Directory Federation Services contains a denial of service vulnerability caused by allocation of resources without limits or throttling, letting unauthorized attackers deny service over a network, exploit requires network access.

  • 7.0 /10 High
    CVE-2026-83644 Auth required

    Windows Audio Service - Privilege Escalation

    Windows Audio Service contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption in the service.