CVEs published October 20, 2026
1,923 CVEs were published on October 20, 2026: 173 critical, 803 high.
- Published
- 1,923
- Critical
- 173
- High
- 803
- Medium
- 831
- Low
- 113
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 637
Most affected products
- Google Chrome
- 353
- Oracle JD Edwards EnterpriseOne Tools
- 84
- Oracle PeopleSoft Enterprise PeopleTools
- 83
- Oracle MySQL Server · Oracle MySQL Cluster
- 78
- Oracle Essbase
- 36
- Oracle Siebel CRM Deployment
- 35
- Oracle REST Data Services
- 32
- Oracle Java SE · Oracle GraalVM for JDK +1
- 30
- Oracle Outside In Technology
- 30
- Totolink
- 30
Critical 173
- CVE-2026-81212DataStage on Cloud Pak for Data Improper AuthorizationIBM DataStage on Cloud Pak for Data
- CVE-2026-92559IBM App Connect Enterprise is vulnerable to a credential exposureIBM App Connect Enterprise
- CVE-2026-91665Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91663Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91658Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91656Vulnerability in Oracle Essbase (component: Federated Partitions).Oracle Essbase
- CVE-2026-91655Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91644Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91638Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91637Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91624Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91622Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91495Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-91491Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).Oracle Identity Manager Connector
- CVE-2026-91490Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).Oracle Identity Manager Connector
- CVE-2026-91408Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).Oracle Identity Manager
- CVE-2026-91354Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91341Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91323Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-91305Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91299Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2026-91265Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91251Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).Oracle SOA Suite
- CVE-2026-91250Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).Oracle SOA Suite
- CVE-2026-91243Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle Business Process Management Suite
- CVE-2026-91241Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91236Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91235Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91234Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91233Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).Oracle SOA Suite
- CVE-2026-91232Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91231Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).Oracle SOA Suite
- CVE-2026-91230Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91225Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).Oracle SOA Suite
- CVE-2026-91224Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91222Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)).Oracle Business Process Management Suite
- CVE-2026-91221Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91220Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow).Oracle Business Process Management Suite
- CVE-2026-91218Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91216Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91214Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-87347Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).Oracle HTTP Server
- CVE-2026-87337Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-87302Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-87251Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83399Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-83397Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).Oracle Data Integrator
- CVE-2026-83396Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).Oracle Data Integrator
- CVE-2026-60432Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).Oracle Solaris
- CVE-2026-101809Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).Oracle Workflow
- CVE-2026-101808Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).Oracle Product Workbench
- CVE-2026-101767Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-101765Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101763Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deploymenOracle Communications BRM - Elastic Charging Engine
- CVE-2026-101634Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101590Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).Oracle Helidon
- CVE-2026-101537Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris
- CVE-2026-101529Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).Oracle Enterprise Manager for Oracle Database
- CVE-2026-101528Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).Oracle Enterprise Manager for Oracle Database
- CVE-2026-101521Vulnerability in Oracle APEX (component: General).Oracle APEX
- CVE-2026-101503Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).Oracle Trusted Answer Search
- CVE-2026-101501Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).Oracle Trusted Answer Search
- CVE-2026-101499Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-101484Vulnerability in Oracle Secure Backup (component: Backup and Restore).Oracle Secure Backup
- CVE-2026-101446Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101420Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-113812Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediatesMozilla-CA
- CVE-2026-113169Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary codGoogle Chrome
- CVE-2026-113116Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside tGoogle Chrome
- CVE-2026-113186Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandboGoogle Chrome
- CVE-2026-113023Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113300Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-113056Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113089Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitraryGoogle Chrome
- CVE-2026-113235Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-113342Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-113138Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-113270Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox Google Chrome
- CVE-2026-113007Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outGoogle Chrome
- CVE-2026-113126Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113084Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-113328Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113171Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-113261Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outGoogle Chrome
- CVE-2026-112992Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside Google Chrome
- CVE-2026-113189Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-113014Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ouGoogle Chrome
- CVE-2026-113283Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execuGoogle Chrome
- CVE-2026-113078Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-113211Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code oGoogle Chrome
- CVE-2026-113263Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113336Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outGoogle Chrome
- CVE-2026-113222Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sanGoogle Chrome
- CVE-2026-113020Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ouGoogle Chrome
- CVE-2026-113252Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arGoogle Chrome
- CVE-2026-113072Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside theGoogle Chrome
- CVE-2026-112712@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch@fastify/middie
- CVE-2016-20101Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.phpPedro Marcelo Issuu Panel
- CVE-2026-94265Authorization: Negotiate sent to foreign origincurl
- CVE-2026-35499An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250Totolink
- CVE-2026-40627An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B202Totolink
- CVE-2026-28763A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000RTotolink
- CVE-2026-41223A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-GTotolink
- CVE-2026-33568A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.Totolink
- CVE-2026-41222A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-Totolink
- CVE-2026-40615A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X20Totolink
- CVE-2026-42020Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-GTotolink
- CVE-2026-42019Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-GTotolink
- CVE-2026-42024Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42023Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42022Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42021Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42026Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)Totolink
- CVE-2026-42025Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)Totolink
- CVE-2026-9660Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XTotolink
- CVE-2026-9659Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XTotolink
- CVE-2026-9814An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2Totolink
- CVE-2026-9817A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-Totolink
- CVE-2026-9827A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504Totolink
- CVE-2026-9869A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0Totolink
- CVE-2026-10131An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20Totolink
- CVE-2026-10132A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-BTotolink
- CVE-2026-10133A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.Totolink
- CVE-2026-10135A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Totolink
- CVE-2026-10136A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20Totolink
- CVE-2026-10137A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2Totolink
- CVE-2026-10138A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421Totolink
- CVE-2026-10139A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327Totolink
- CVE-2026-10141A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421Totolink
- CVE-2026-92388FTP wildcard write callback mixupcurl
- CVE-2026-87866wolfSSL public-key pinning bypasscurl
- CVE-2026-87861cross-origin reuse of a Negotiate connectioncurl
- CVE-2026-86414leaking host credentials to HTTP proxycurl
- CVE-2026-86413Negotiate credentials sent to redirected origincurl
- CVE-2026-112380Missing authorization in the WhatsApp channel in Kiro CrewAmazon Kiro Crew
- CVE-2026-86411FTP connection reuse inherits client-certificatecurl
- CVE-2026-113867Stanza injection in XMPP chatMozilla Thunderbird
- CVE-2026-97406Authentication Bypass via Bearer Tokens to Unauthorized Credential MintingXerj Console API
- CVE-2026-113709Argo CD: A Kustomize Helm config home can run commands in the repo-serverargoproj argo-cd
- CVE-2026-113708Argo CD: A Kustomize remote ref can run commands in the repo-serverargoproj argo-cd
- CVE-2026-113672Argo CD: A Jsonnet import can read files from the repo-serverargoproj argo-cd
- CVE-2026-113802Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file HandlerWavlink WL-WN530BE1-A
- CVE-2026-105772Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionIdADK TypeScript
- CVE-2026-113506aaPanel File Manager common.py ExecShell os command injectionaaPanel
- CVE-2026-113703SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofinggiuseppe99barchetta SuggestArr
- CVE-2026-113682Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Passwordnetworknt light-4j
- CVE-2026-113678Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cronfroxlor
- CVE-2026-113613FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress pluginFlexGet
- CVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system userApache Software Foundation Apache CouchDB
- CVE-2026-93475Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509Eclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-103119Apache Tomcat: AJP response mix-upApache Software Foundation Apache Tomcat
- CVE-2026-101356Apache Tomcat: HTTP/2 request/response mix-up after error during async processingApache Software Foundation Apache Tomcat
- CVE-2026-101296Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsApache Software Foundation Apache Tomcat
- CVE-2026-113399Incorrect boundary conditions in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-113391DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injectionDrayTek Vigor2960
- CVE-2026-113620Eclipse ioFog operator WebSocket accepts an unverified JWTEclipse Foundation Eclipse ioFog
- CVE-2026-113390DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injectionDrayTek Vigor2960
- CVE-2026-113389DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injectionDrayTek Vigor2960
- CVE-2026-105312Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalationRed Hat StreamsHub Console for Apache Kafka® · Red Hat stre…
- CVE-2026-9589Unblu Spark Authorization Bypass in Configuration Cascade OperationsUnblu Spark
- CVE-2026-43845A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.Advantech ADAM-3600
- CVE-2026-43844A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.Advantech ADAM-3600
- CVE-2026-43838A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.Advantech ADAM-3600
- CVE-2026-43836A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.Advantech ADAM-3600
- CVE-2026-113380In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup…Signal RingRTC
- CVE-2026-86868An authentication issue was addressed with improved state management.Apple macOS
- CVE-2026-77936Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Accessletta-ai letta
- CVE-2026-77933DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deploymenteosphoros-ai DB-GPT
- CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agenteosphoros-ai DB-GPT
- CVE-2026-77930EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-AgentsEvoScientist
- CVE-2026-75128Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpointchatchat-space Langchain-Chatchat
- CVE-2026-109444OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt InjectionTracer-Cloud opensre
- CVE-2026-109442piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shellcas-bigdatalab piflow
High 803
- CVE-2026-76587IBM Planning Analytics Buffer OverflowIBM Planning Analytics
- CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTpypa virtualenv · virtualenv
- CVE-2026-113776virtualenv activation scripts run code from a path that contains a placeholder namepypa virtualenv · virtualenv
- CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotepypa virtualenv · virtualenv
- CVE-2026-82891IBM Guardium Data Protection is affected by a security vulnerabilityIBM Guardium Data Protection
- CVE-2026-93441IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of serviceIBM QRadar Security Information and Event Management
- CVE-2026-93442IBM QRadar SIEM Out-of-bounds ReadIBM QRadar
- CVE-2026-93888IBM Sterling Connect:Direct for Unix Buffer OverflowIBM Sterling Connect Direct for Unix
- CVE-2026-85783Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar…Crypt-Age
- CVE-2026-91668Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository).Oracle Data Integrator
- CVE-2026-91664Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91661Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91659Vulnerability in Oracle Essbase (component: Build).Oracle Essbase
- CVE-2026-91653Vulnerability in Oracle Essbase (component: Essbase Web Platform).Oracle Essbase
- CVE-2026-91651Vulnerability in Oracle Essbase (component: Essbase Web Platform).Oracle Essbase
- CVE-2026-91647Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91642Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91639Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91636Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91635Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91632Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91627Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Oracle Communications Billing and Revenue Management
- CVE-2026-91625Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91623Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91610Vulnerability in Oracle REST Data Services (component: General).Oracle REST Data Services
- CVE-2026-91608Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-91604Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91597Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91579Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-91573Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91568Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-91563Vulnerability in the Oracle OLAP component of Oracle Database Server.Oracle OLAP
- CVE-2026-91557Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91552Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-91550Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91549Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91546Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91545Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91542Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-91539Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91537Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris
- CVE-2026-91535Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91534Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91532Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Applications Manager
- CVE-2026-91527Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).Oracle ZFS Storage Appliance Kit
- CVE-2026-91521Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91520Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91517Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin).Oracle Management Pack for Oracle GoldenGate
- CVE-2026-91515Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91512Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91511Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).Oracle Purchasing
- CVE-2026-91506Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).Oracle Workflow
- CVE-2026-91504Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite).Oracle WebCenter Content
- CVE-2026-91503Vulnerability in the VPD component of Oracle Database Server.Oracle Database Server
- CVE-2026-91502Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-91499Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-91496Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).Oracle Workflow
- CVE-2026-91494Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).Oracle Identity Manager Connector
- CVE-2026-91493Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).Oracle Identity Manager Connector
- CVE-2026-91492Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+).Oracle Identity Manager Connector
- CVE-2026-91489Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).Oracle Identity Manager Connector
- CVE-2026-91488Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).Oracle Identity Manager Connector
- CVE-2026-91484Vulnerability in Oracle Java SE (component: Java plugin).Oracle Java SE
- CVE-2026-91483Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-91478Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).Oracle PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2026-91473Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).Oracle HTTP Server
- CVE-2026-91465Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).Oracle PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-91460Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).Oracle Outside In Technology
- CVE-2026-91459Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).Oracle Outside In Technology
- CVE-2026-91458Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-91457Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).Oracle Outside In Technology
- CVE-2026-91450Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91449Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91448Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91447Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91445Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard).Oracle Siebel CRM End User
- CVE-2026-91442Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91438Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91437Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91433Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer).Oracle Siebel Apps - Field Service
- CVE-2026-91419Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).Oracle HTTP Server
- CVE-2026-91415Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91407Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).Oracle Identity Manager
- CVE-2026-91406Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).Oracle Outside In Technology
- CVE-2026-91405Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).Oracle Outside In Technology
- CVE-2026-91377Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).Oracle Siebel CRM Integration
- CVE-2026-91358Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+Oracle Business Process Management Suite
- CVE-2026-91355Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91353Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91350Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91349Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91348Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris
- CVE-2026-91347Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests).Oracle iSupport
- CVE-2026-91346Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91345Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91344Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91343Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91342Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91340Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91338Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations).Oracle iSupport
- CVE-2026-91337Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations).Oracle iProcurement
- CVE-2026-91328Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91327Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91326Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91325Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91321Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management).Oracle iProcurement
- CVE-2026-91316Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).Oracle iProcurement
- CVE-2026-91315Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91314Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91313Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91311Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91310Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91308Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91307Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91306Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91304Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91303Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91296Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91295Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91288Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91287Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91286Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91273Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91272Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91271Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91270Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91269Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91268Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91267Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91266Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91260Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).Oracle iProcurement
- CVE-2026-91259Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-91256Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-91255Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris
- CVE-2026-91254Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris
- CVE-2026-91253Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris
- CVE-2026-91252Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-91242Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins).Oracle Solaris
- CVE-2026-91239Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91238Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91237Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91229Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91228Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91227Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91226Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91223Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91219Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91217Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91215Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91213Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer).Oracle Business Process Management Suite
- CVE-2026-91212Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).Oracle Identity Manager Connector
- CVE-2026-91211Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server).Oracle Identity Manager Connector
- CVE-2026-87421Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).Oracle Solaris
- CVE-2026-87420Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).Oracle Service Bus
- CVE-2026-87419Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).Oracle Service Bus
- CVE-2026-87417Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).Oracle Solaris
- CVE-2026-87408Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-87404Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine).Oracle Pasta
- CVE-2026-87403Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-87402Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-87398Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87397Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87395Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87394Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87369Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).Oracle Service Bus
- CVE-2026-87364Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).Oracle Service Bus
- CVE-2026-87363Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-87359Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).Oracle Service Bus
- CVE-2026-87358Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).Oracle General Ledger
- CVE-2026-87357Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations).Oracle Order Capture
- CVE-2026-87356Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session).Oracle Applications Platform Engineering
- CVE-2026-87351Vulnerability in Oracle GoldenGate (component: Admin Server Executable).Oracle GoldenGate
- CVE-2026-87346Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle…Oracle HTTP Server
- CVE-2026-87322Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87316Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87315Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87314Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87313Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87312Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87310Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87309Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87308Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87307Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87306Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87305Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87304Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87301Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87300Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Oracle Weblogic Server Proxy Plug-in
- CVE-2026-87296Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-87263Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83426Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83409Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83407Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83404Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python).Oracle MySQL Connectors
- CVE-2026-83403Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83402Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83398Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms).Oracle Data Integrator
- CVE-2026-83393Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83379Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Oracle Weblogic Server Proxy Plug-in
- CVE-2026-83370Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions).Oracle Sourcing
- CVE-2026-83367Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events).Oracle Shipping Execution
- CVE-2026-83366Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events).Oracle Shipping Execution
- CVE-2026-83363Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-83361Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-60662Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-47025Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris
- CVE-2026-101854Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-101853Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-101852Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-101851Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI).Oracle Installed Base
- CVE-2026-101849Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance).Oracle Installed Base
- CVE-2026-101847Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-101842Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO).Oracle Strategic Network Optimization
- CVE-2026-101841Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service).Oracle Global Order Promising
- CVE-2026-101840Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-101837Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events).Oracle Shipping Execution
- CVE-2026-101835Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events).Oracle Shipping Execution
- CVE-2026-101834Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events).Oracle Shipping Execution
- CVE-2026-101833Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations).Oracle Shipping Execution
- CVE-2026-101831Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-101830Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Contracts
- CVE-2026-101829Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-101827Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).Oracle HCM Common Architecture
- CVE-2026-101826Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).Oracle HCM Common Architecture
- CVE-2026-101825Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).Oracle HCM Common Architecture
- CVE-2026-101824Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).Oracle Document Management and Collaboration
- CVE-2026-101823Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-101822Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-101820Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN).Oracle General Ledger
- CVE-2026-101818Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-101816Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-101815Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations).Oracle Assets
- CVE-2026-101813Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2026-101810Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-101797Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101796Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101791Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).Oracle Communications BRM - Elastic Charging Engine
- CVE-2026-101786Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101785Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101783Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-101781Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101775Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101773Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101772Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101771Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101770Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101769Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2026-101768Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2026-101759Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101758Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101757Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).Oracle Application Object Library
- CVE-2026-101746Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).Oracle Agile Engineering Data Management
- CVE-2026-101744Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101742Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Manager
- CVE-2026-101739Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101736Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core).Oracle Primavera Unifier
- CVE-2026-101735Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control).Oracle Primavera Unifier
- CVE-2026-101719Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-101712Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101708Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101707Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).Oracle Concurrent Processing
- CVE-2026-101705Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary).Oracle Common Applications
- CVE-2026-101704Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other).Oracle Concurrent Processing
- CVE-2026-101703Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations).Oracle Pasta
- CVE-2026-101700Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-101699Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-101698Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).Oracle One-to-One Fulfillment
- CVE-2026-101694Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101692Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101690Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101689Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101688Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101687Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101686Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101685Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101684Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations).Oracle E-Business Suite Integrated SOA Gateway
- CVE-2026-101683Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-101682Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-101681Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-101680Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Oracle Communications Billing and Revenue Management
- CVE-2026-101679Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101676Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).Oracle Concurrent Processing
- CVE-2026-101672Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).Oracle Call Center Technology
- CVE-2026-101665Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101664Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101662Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101661Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101660Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101658Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101656Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101655Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101654Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101653Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101650Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-101649Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-101648Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-101647Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2026-101646Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2026-101645Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2026-101643Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Online
- CVE-2026-101642Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-101641Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-101640Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-101638Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-101636Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).Oracle Mobile Field Service
- CVE-2026-101635Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101604Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).Oracle Communications Unified Inventory Management
- CVE-2026-101603Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).Oracle Communications Unified Inventory Management
- CVE-2026-101602Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101599Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-101598Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-101596Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101594Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101593Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101585Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).Oracle Helidon
- CVE-2026-101583Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper).Oracle Helidon
- CVE-2026-101579Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server).Oracle Helidon
- CVE-2026-101572Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).Oracle Helidon
- CVE-2026-101567Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).Oracle Cost Management
- CVE-2026-101566Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).Oracle Application Object Library
- CVE-2026-101562Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect).Oracle Agile PLM
- CVE-2026-101560Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server).Oracle Commerce Platform
- CVE-2026-101557Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).Oracle Purchasing
- CVE-2026-101556Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101555Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101554Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101552Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields).Oracle Application Object Library
- CVE-2026-101551Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-101549Vulnerability in Oracle Application Testing Suite (component: OpenScript).Oracle Application Testing Suite
- CVE-2026-101548Vulnerability in Oracle Application Testing Suite (component: OpenScript).Oracle Application Testing Suite
- CVE-2026-101546Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations).Oracle Materials Requirement Planning
- CVE-2026-101545Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Inventory Management
- CVE-2026-101544Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101543Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-101542Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-101541Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-101540Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-101536Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).Oracle Cost Management
- CVE-2026-101535Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).Oracle Sales Foundation
- CVE-2026-101534Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).Oracle EDI Gateway
- CVE-2026-101532Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).Oracle EDI Gateway
- CVE-2026-101531Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-101527Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install).Oracle Enterprise Manager Base Platform
- CVE-2026-101526Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).Oracle Enterprise Manager for Siebel
- CVE-2026-101525Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).Oracle Enterprise Manager for Siebel
- CVE-2026-101520Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen InstalOracle Global Lifecycle Management NextGen OUI Framework
- CVE-2026-101519Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).Oracle EDI Gateway
- CVE-2026-101518Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).Oracle Enterprise Manager Base Platform
- CVE-2026-101508Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-101506Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).Oracle Trusted Answer Search
- CVE-2026-101505Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).Oracle Trusted Answer Search
- CVE-2026-101504Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).Oracle Trusted Answer Search
- CVE-2026-101498Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).Oracle Trusted Answer Search
- CVE-2026-101495Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).Oracle Siebel CRM Development
- CVE-2026-101494Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101482Vulnerability in Oracle Secure Backup (component: Device Management and Support).Oracle Secure Backup
- CVE-2026-101481Vulnerability in Oracle Secure Backup (component: Device Management and Support).Oracle Secure Backup
- CVE-2026-101479Vulnerability in Oracle Secure Backup (component: Backup and Restore).Oracle Secure Backup
- CVE-2026-101478Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).Oracle Autonomous Health Framework
- CVE-2026-101477Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).Oracle Autonomous Health Framework
- CVE-2026-101473Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101469Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-101468Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).Oracle Siebel CRM Deployment
- CVE-2026-101467Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework).Oracle Siebel CRM End User
- CVE-2026-101466Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).Oracle EDI Gateway
- CVE-2026-101464Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101463Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI).Oracle Siebel CRM End User
- CVE-2026-101461Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101460Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101459Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101458Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101457Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).Oracle Siebel Apps - Life Sciences
- CVE-2026-101452Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay).Oracle Autonomous Health Framework
- CVE-2026-101451Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI).Oracle Siebel Life Sciences
- CVE-2026-101450Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101447Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).Oracle Siebel CRM Development
- CVE-2026-101438Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101434Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101431Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101429Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101428Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101427Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101422Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101421Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101416Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101411Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101410Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101409Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101398Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-101390Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101388Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101387Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).Oracle Capacity
- CVE-2026-113729Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalizationmoov-io signedxml · github.com/moov-io/signedxml
- CVE-2026-113728Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpointbulwarkmail webmail
- CVE-2026-113727OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runsopenchoreo · github.com/openchoreo/openchoreo
- CVE-2026-113274Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113039Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113125Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113013Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113088Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitraryGoogle Chrome
- CVE-2026-113083Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113286Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-113227Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-112996Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113294Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-113130Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113074Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113067Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113046Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-113182Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-113331Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113314Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-112994Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113063Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113254Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113132Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113287Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113121Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbiGoogle Chrome
- CVE-2026-113107Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113085Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113288Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113248Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113061Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113313Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113268Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insideGoogle Chrome
- CVE-2026-113036Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside theGoogle Chrome
- CVE-2026-113269Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113260Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside theGoogle Chrome
- CVE-2026-113173Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-113156Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113292Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute Google Chrome
- CVE-2026-113145Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitraGoogle Chrome
- CVE-2026-113021Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-112998Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113017Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113184Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113140Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113180Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary codGoogle Chrome
- CVE-2026-113080Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-113025Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113024Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-113299Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113245Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113306Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113029Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-113152Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113226Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113330Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-113247Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113048Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113244Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113241Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-113291Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113167Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113213Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113004Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113214Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113027Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113103Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113256Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113229Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113168Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113091Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code Google Chrome
- CVE-2026-113015Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113114Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113323Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-113312Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113053Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113215Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113251Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113086Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113133Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113052Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113200Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113111Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113008Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrarGoogle Chrome
- CVE-2026-113096Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113062Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-113258Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113170Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113203Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sanGoogle Chrome
- CVE-2026-113197Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113065Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113233Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-113344Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113221Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113100Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113030Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy…Google Chrome
- CVE-2026-113153Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113037Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-112997Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113120Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113028Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113177Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113267Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113087Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113216Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113099Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute Google Chrome
- CVE-2026-113228Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113259Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113075Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113187Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113110Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-113165Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-113282Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inGoogle Chrome
- CVE-2026-113158Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113090Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the saGoogle Chrome
- CVE-2026-113230Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113124Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inGoogle Chrome
- CVE-2026-113243Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113064Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-113001Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113106Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113136Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113123Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113204Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially executGoogle Chrome
- CVE-2026-113032Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-113049Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside theGoogle Chrome
- CVE-2026-113128Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-113081Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113031Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113041Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113016Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113202Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113043Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the saGoogle Chrome
- CVE-2026-113265Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113073Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113148Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113308Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-113076Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113255Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-113335Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113195Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-113218Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-113276Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-113042Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113185Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113206Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113149Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113262Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113332Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113172Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-112995Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113190Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113278Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113071Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inGoogle Chrome
- CVE-2026-113009Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113307Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113115Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113060Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary coGoogle Chrome
- CVE-2026-113194Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113238Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-113208Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the saGoogle Chrome
- CVE-2026-113059Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113321Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113112Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113272Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113249Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-112999Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113327Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113232Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113118Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113162Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113205Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113207Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inGoogle Chrome
- CVE-2026-113146Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codeGoogle Chrome
- CVE-2026-113289Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-113183Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113290Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sGoogle Chrome
- CVE-2026-113155Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-113003Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113166Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-113005Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insidGoogle Chrome
- CVE-2026-113219Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-113319Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113343Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113108Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113275Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113220Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitGoogle Chrome
- CVE-2026-113105Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113264Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-113127Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113337Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113147Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-113131Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-113239Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-113164Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113302Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113033Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113311Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113150Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-113176Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113257Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113198Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113011Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary coGoogle Chrome
- CVE-2026-113281Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113240Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113094Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113034Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113301Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-113018Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113006Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-113069Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-113113Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113109Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113250Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sGoogle Chrome
- CVE-2026-113191Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113079Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insiGoogle Chrome
- CVE-2026-113022Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113174Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113231Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-113320Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitraryGoogle Chrome
- CVE-2026-113068Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113055Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-112993Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113179Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113000Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113160Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113095Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vGoogle Chrome
- CVE-2026-113019Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113181Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox Google Chrome
- CVE-2026-113154Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113161Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113040Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-113217Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code iGoogle Chrome
- CVE-2026-113192Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113175Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113012Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insGoogle Chrome
- CVE-2026-113093Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code Google Chrome
- CVE-2026-113338Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113318Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the saGoogle Chrome
- CVE-2026-113334Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arGoogle Chrome
- CVE-2026-113324Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113285Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113210Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113293Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113273Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113266Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary Google Chrome
- CVE-2026-113135Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-113044Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-113305Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-113234Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113316Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the saGoogle Chrome
- CVE-2026-113141Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113284Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113236Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside thGoogle Chrome
- CVE-2026-113315Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside thGoogle Chrome
- CVE-2026-113298Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113253Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-113163Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-113104Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113188Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the Google Chrome
- CVE-2026-113117Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-113317Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrGoogle Chrome
- CVE-2026-113339Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-113134Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113092Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insideGoogle Chrome
- CVE-2026-113119Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside tGoogle Chrome
- CVE-2026-113058Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-113242Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside Google Chrome
- CVE-2026-113097Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside Google Chrome
- CVE-2026-113101Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113303Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside tGoogle Chrome
- CVE-2026-113271Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-113280Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-113279Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code iGoogle Chrome
- CVE-2026-112407Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applicationsAWS CICD-toolchain-for-serverless-applications
- CVE-2016-20104EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.phpEyeLock nano NXT
- CVE-2016-20103Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.phpCherry Team Cherry Plugin
- CVE-2016-20100Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-previewIan Howatson Memphis Documents Library
- CVE-2015-20128FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspxFooSun DotNetCMS
- CVE-2015-20125Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.phpAspose PDF Exporter
- CVE-2015-20124Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.phpAspose Importer & Exporter
- CVE-2015-20123Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.phpAspose Doc Exporter
- CVE-2014-125134ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.phpChurcHope
- CVE-2014-125133NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.phpimithemes NativeChurch
- CVE-2012-20002TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.phpJames Charlesworth TinyMCE Thumbnail Gallery
- CVE-2026-107929local interface connection reuse mixupcurl
- CVE-2026-111758markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)markdown-it
- CVE-2026-107928info leak uploading over WebSockets with GnuTLScurl
- CVE-2026-94266password leak in CURLINFO_EFFECTIVE_URLcurl
- CVE-2026-92391curl_mime_free stack overflow by recursioncurl
- CVE-2026-103672HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array IndexHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-92390-J no-clobber guarantee bypassed with 103 early hintscurl
- CVE-2026-92389TFTP direction confusioncurl
- CVE-2026-92387never-ending loop via server response omissioncurl
- CVE-2026-92386server-set cookie aborts cookie jar loadcurl
- CVE-2026-87865knownhost callback mismatches key as missingcurl
- CVE-2026-87863HSTS response erases persisted entriescurl
- CVE-2026-87864IMAP APPEND plus CRLF conversion command injectioncurl
- CVE-2026-87862HSTS cache import drops longer-lived childcurl
- CVE-2026-86415auto client cert connection reuse mixupcurl
- CVE-2026-86412server-set cookie erases cookie jarcurl
- CVE-2026-86410redirect to SFTP or SCP bypasses host verificationcurl
- CVE-2026-86409stale SigV4 headers sent unintendedcurl
- CVE-2026-113725virtualenv bash activate runs commands from an environment name with a backslash before $pypa virtualenv · virtualenv
- CVE-2026-113723virtualenv: Bash prompt values can change meaning under older compatibility modespypa virtualenv · virtualenv
- CVE-2026-113722virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxpypa virtualenv · virtualenv
- CVE-2026-113718virtualenv: Xonsh activation literals depend on the script decoding codecpypa virtualenv · virtualenv
- CVE-2026-113810Stored XSS on SNS Enrollment PortalStormshield Network Security
- CVE-2026-111767MCP TypeScript SDK: Experimental tasks were not tied to the session that created themmodelcontextprotocol typescript-sdk · @modelcontextprotocol…
- CVE-2026-100134Acrobat for Edge | Out-of-bounds Write (CWE-787)Adobe Acrobat for Edge
- CVE-2026-113808Stored XSS on SNS Enrollment PortalStormshield Network Security
- CVE-2026-111756follow-redirects array-form headers bypass cross-origin credential strippingfollow-redirects
- CVE-2026-113711ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-exportapostrophecms apostrophe · @apostrophecms import-export +2
- CVE-2026-113666ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of serviceapostrophecms apostrophe · @apostrophecms db-connect +2
- CVE-2026-113658ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directoryapostrophecms apostrophe · apostrophe
- CVE-2026-28328SolarWinds Observability Self-Hosted broken authorization schemaSolarWinds Observability Self-Hosted
- CVE-2026-90800Apache CouchDB: Auth bypass in prefixed _users and _replicator databasesApache Software Foundation Apache CouchDB
- CVE-2026-113679HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_stringharfbuzz
- CVE-2026-113607Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_datajleyva moodle-block_configurablereports
- CVE-2026-113606Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing FoldersStirling-Tools Stirling-PDF
- CVE-2026-113605Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databaseStirling-Tools Stirling-PDF
- CVE-2025-71436Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Taglibrdf Raptor RDF Syntax Library
- CVE-2026-90797Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_sessionApache Software Foundation Apache CouchDB
- CVE-2026-95107Module object allocation size overflow corrupts the manager object poolEclipse Foundation Eclipse ThreadX
- CVE-2026-95109Cortex-A7 module data validation checks only the first address of a caller-supplied rangeEclipse Foundation Eclipse ThreadX
- CVE-2026-94192Module object deallocation can free a live ThreadX kernel objectEclipse Foundation Eclipse ThreadX
- CVE-2026-92843Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX SecureEclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-111765A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fixa2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-http-…
- CVE-2026-112836WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-92853Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX SecureEclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-94018NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow pathEclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-111764A2A Java SDK has a fail-open default task authorizationa2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…
- CVE-2026-91189GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or themeEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-112942launch-editor: `fs.existsSync()` existence check can be bypassed on Windowsvitejs launch-editor · vitejs vite +4
- CVE-2026-91186PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds writeEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-112940filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filestox-dev filelock · filelock
- CVE-2026-92162Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstreamflatpak
- CVE-2026-93446Apache Tomcat: Possible TLS 1.3 connection failuresApache Software Foundation Apache Tomcat
- CVE-2026-88041Apache Tomcat: HTTP/2 trailer header cross-contaminationApache Software Foundation Apache Tomcat
- CVE-2026-80353Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connectorApache Software Foundation Apache Tomcat
- CVE-2026-91041FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT imageEclipse Foundation Eclipse ThreadX - FileX
- CVE-2026-105941Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultnameRed Hat streams for Apache Kafka
- CVE-2026-113619Eclipse ioFog renders request templates before authenticationEclipse Foundation Eclipse ioFog
- CVE-2026-34485A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)Nokia 1830 Global Express
- CVE-2026-105949Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpointsCruise Control for Apache Kafka · Red Hat streams for Apach…
- CVE-2026-105311Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputyRed Hat StreamsHub Console for Apache Kafka® · Red Hat stre…
- CVE-2026-14933Unblu Spark Cross-Site Scripting in Embedded Co-BrowsingUnblu Spark
- CVE-2026-113358LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routeslavalite cms
- CVE-2026-113356DokuWiki before 2026-07-14c PHP Object Injection via Draft Race ConditionDokuWiki
- CVE-2026-113354Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/contentFinsys dockhand
- CVE-2026-113352uTox through 0.18.1 Path Traversal via Auto-Accepted File TransfersuTox
- CVE-2026-113351libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserResetlibexpat
- CVE-2026-108089Apache Cocoon: Unauthenticated access to diagnostic interfacesApache Software Foundation Apache Cocoon
- CVE-2026-108088Apache Cocoon: Cross-user cache poisoningApache Software Foundation Apache Cocoon
- CVE-2026-108087Apache Cocoon: SQL InjectionApache Software Foundation Apache Cocoon
- CVE-2026-108086Apache Cocoon: XEE could lead to SSRF and information disclosureApache Software Foundation Apache Cocoon
- CVE-2026-112064SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112066Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112238SQL Injection in extension "File manager" (ameos_filemanager)TYPO3 Extension "File manager"
- CVE-2026-112239Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)Extension "TYPO3 AI Integration Extension"
- CVE-2026-113459Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)Extension "TYPO3 AI Integration Extension"
- CVE-2026-43858A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech ADAM-3600
- CVE-2026-43857A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.Advantech ADAM-3600
- CVE-2026-85267Cross-Site WebSocket Hijacking in Google Cloud ShellGoogle Cloud Cloud Shell
- CVE-2026-43856A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbAdvantech ADAM-3600
- CVE-2026-43855A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech ADAM-3600
- CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.Advantech ADAM-3600
- CVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.Advantech ADAM-3600
- CVE-2026-43851A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.Advantech ADAM-3600
- CVE-2026-43850A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.Advantech ADAM-3600
- CVE-2026-43847A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even wheAdvantech ADAM-3600
- CVE-2026-43846A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.Advantech ADAM-3600
- CVE-2026-113469Improper Signature Verification of Active Update FilesStormshield Network Security
- CVE-2026-43839A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.Advantech ADAM-3600
- CVE-2026-92287Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validationApache Software Foundation Apache Arrow C++ · Apache Softwa…
- CVE-2026-43837A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve codeAdvantech ADAM-3600
- CVE-2026-43835A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentAdvantech ADAM-3600
- CVE-2026-43834A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executiAdvantech ADAM-3600
- CVE-2026-111090Improper Signature Verification of Firmware Update FilesStormshield Network Security
- CVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8Red Hat Enterprise Linux
- CVE-2026-113407YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-113406YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-113405YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-113403ArmorX Global Technology｜ArmorX Spam - Command InjectionArmorX Global Technology ArmorX Spam
- CVE-2026-113402ArmorX Global Technology｜ArmorX Spam - Local File InclusionArmorX Global Technology ArmorX Spam
- CVE-2026-113404Uniong｜WebITR - Insecure DeserializationUniong WebITR
- CVE-2026-93300EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' ParameterEventON - Subscriber
- CVE-2026-97627Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.Atsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8
- CVE-2026-113386Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection.Roundcube Webmail
- CVE-2026-86467Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's accountApache Software Foundation Apache Airflow Amazon provider
- CVE-2026-17518Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations ASUS Router
- CVE-2026-102438An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges ASUS Armoury Crate
- CVE-2026-105299Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deploymentshttps://github.com/cloudflare/pingora · pingora-proxy
- CVE-2026-86977An authorization issue was addressed with improved network restrictions.Apple iOS and iPadOS
- CVE-2026-86961A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86949This issue was addressed by enforcing library validation on the affected binaries.Apple Xcode
- CVE-2026-86948This issue was addressed by enforcing library validation on the affected binaries.Apple Xcode
- CVE-2026-86922A type confusion issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-86919A stack overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-28854The issue was addressed with additional app bundle integrity checks.Apple macOS
- CVE-2026-28853The issue was addressed with improved checks.Apple macOS
- CVE-2026-77938Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritanceletta-ai letta
- CVE-2026-77937Letta through 0.16.8 Cross-Tenant Impersonation via user_id Headerletta-ai letta
- CVE-2026-77935Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlerscoze-dev coze-studio
- CVE-2026-77934Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runnercoze-dev coze-studio
- CVE-2026-77926Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Toolapconw Aix-DB
- CVE-2026-109443JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shelljd-opensource JoySafeter
- CVE-2026-109440LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCodeginlix-ai LangAlpha
- CVE-2026-109395Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoderning compress-lzf
- CVE-2026-105297Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limitshttps://github.com/cloudflare/pingora · pingora-core
- CVE-2026-95168An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and
Medium, low and unrated 947
- CVE-2026-113735D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentialsD-Link DCS-6501LH
- CVE-2026-113707a2aproject a2a-rs inmemory.rs update race conditiona2aproject a2a-rs
- CVE-2026-113706a2aproject a2a-rs inmemory.rs information disclosurea2aproject a2a-rs
- CVE-2026-109682Metasploit Framework HTTP Redirect Server-Side Request ForgeryRapid7 Metasploit Framework
- CVE-2026-109681Metasploit Framework FTP PASV Response SSRFRapid7 Metasploit Framework
- CVE-2026-113705a2aproject a2a-rs error.rs information exposurea2aproject a2a-rs
- CVE-2026-112202Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF imagesImager-File-GIF · Imager
- CVE-2026-9825IBM Cyber Fraud Reachable AssertionIBM CyberFraud
- CVE-2026-113704a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgerya2aproject a2a-rs
- CVE-2026-87800IBM Cyber Fraud includes components with multiple known vulnerabilitiesIBM Cyber Fraud
- PYSEC-2026-4320certifi bundles emSign root CAs with compromised intermediate CA keyscertifi
- CVE-2026-93744IBM i Improper AuthenticationIBM i
- CVE-2026-94402IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncationIBM @carbon/charts · IBM @carbon/charts-react +3
- CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tooldjust-org djust · djust
- CVE-2026-91662Vulnerability in Oracle Essbase (component: Java Based Agent).Oracle Essbase
- CVE-2026-91660Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91657Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91654Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91652Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91650Vulnerability in Oracle Essbase (component: Java Based Agent).Oracle Essbase
- CVE-2026-91649Vulnerability in Oracle Essbase (component: Java Based Agent).Oracle Essbase
- CVE-2026-91648Vulnerability in Oracle Essbase (component: Java Based Agent).Oracle Essbase
- CVE-2026-91646Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91645Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91643Vulnerability in Oracle Essbase (component: Java Based Agent).Oracle Essbase
- CVE-2026-91641Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91640Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91634Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91633Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91631Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91630Vulnerability in Oracle Essbase (component: Security).Oracle Essbase
- CVE-2026-91629Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Oracle Communications Billing and Revenue Management
- CVE-2026-91628Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-91617Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).Oracle Middleware Common Libraries and Tools
- CVE-2026-91616Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).Oracle Middleware Common Libraries and Tools
- CVE-2026-91615Vulnerability in the Java VM component of Oracle Database Server.Oracle Database Server
- CVE-2026-91614Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).Oracle Communications Unified Inventory Management
- CVE-2026-91613Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).Oracle Communications Unified Inventory Management
- CVE-2026-91612Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).Oracle Communications Unified Inventory Management
- CVE-2026-91609Vulnerability in Oracle REST Data Services (component: Graph QL).Oracle REST Data Services
- CVE-2026-91607Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91600Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91598Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Service).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91590Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).Oracle BI Publisher
- CVE-2026-91588Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91582Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91577Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91576Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91574Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-91565Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-91562Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory).Oracle PeopleSoft Enterprise FIN Inventory Brazil
- CVE-2026-91559Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration).Oracle PeopleSoft Enterprise FIN Manufacturing Brazil
- CVE-2026-91555Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-91554Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-91553Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator).Oracle PeopleSoft Enterprise FIN Product Configurator Brazil
- CVE-2026-91547Vulnerability in Oracle GoldenGate (component: Vendor Access Module).Oracle GoldenGate
- CVE-2026-91541Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects).Oracle PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-91536Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).Oracle SOA Suite
- CVE-2026-91530Vulnerability in Oracle GoldenGate (component: Admin Client Executable).Oracle GoldenGate
- CVE-2026-91528Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-91526Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-91524Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91523Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-91519Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-91518Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-91514Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-91505Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-91501Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer).Oracle Identity Manager
- CVE-2026-91497Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-91487Vulnerability in Oracle Java SE (component: Compiler).Oracle Java SE
- CVE-2026-91486Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger).Oracle PeopleSoft Enterprise FIN General Ledger Brazil
- CVE-2026-91485Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management).Oracle PeopleSoft Enterprise FIN Cash Management
- CVE-2026-91482Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration).Oracle PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2026-91481Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration).Oracle PeopleSoft Enterprise SCM Purchasing
- CVE-2026-91480Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).Oracle PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2026-91479Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-91477Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX).Oracle JavaFX
- CVE-2026-91476Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).Oracle PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-91475Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91474Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement).Oracle PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-91471Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework).Oracle PeopleSoft Enterprise CC Common Application Objects
- CVE-2026-91468Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-91467Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).Oracle Fusion Middleware Control
- CVE-2026-91466Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management).Oracle PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-91464Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91463Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91462Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91461Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91455Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91453Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: LightweOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91452Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91451Vulnerability in Oracle Java SE (component: Networking).Oracle Java SE
- CVE-2026-91446Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91444Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91443Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91441Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).Oracle Siebel Apps - Customer Order Management
- CVE-2026-91440Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91439Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91436Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91435Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91434Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91432Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91431Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91430Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts).Oracle Siebel Apps - Financial Services
- CVE-2026-91429Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91428Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91427Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91426Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91424Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91423Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91422Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91421Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91420Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91418Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (comOracle Java SE · Oracle JavaFX +2
- CVE-2026-91417Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).Oracle Java SE · Oracle GraalVM Enterprise Edition
- CVE-2026-91414Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-91413Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).Oracle Siebel CRM Development
- CVE-2026-91412Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91411Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91410Vulnerability in Oracle Java SE (component: Libraries).Oracle Java SE
- CVE-2026-91409Vulnerability in Oracle Java SE (component: Networking).Oracle Java SE
- CVE-2026-91404Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).Oracle Outside In Technology
- CVE-2026-91402Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE · Oracle JavaFX +1
- CVE-2026-91400Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91399Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2026-91398Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91397Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ServiceOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91396Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: UtilityOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91395Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: UtilityOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91394Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).Oracle Java SE · Oracle GraalVM for JDK
- CVE-2026-91393Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91392Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91391Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91390Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91389Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91388Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91387Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-91386Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2026-91385Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE · Oracle JavaFX +1
- CVE-2026-91384Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91383Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91382Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91381Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE · Oracle GraalVM Enterprise Edition
- CVE-2026-91380Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: UtilityOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91379Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tooOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91378Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).Oracle Siebel CRM Integration
- CVE-2026-91376Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2026-91375Vulnerability in Oracle Java SE (component: Libraries).Oracle Java SE
- CVE-2026-91374Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ServiceOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91373Vulnerability in Oracle Java SE (component: JSSE).Oracle Java SE
- CVE-2026-91372Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91371Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91370Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91369Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91368Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91367Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91366Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91365Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91364Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91363Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91362Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91361Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91360Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91359Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-91357Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry).Oracle Order Management
- CVE-2026-91356Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for SwitzeOracle PeopleSoft Enterprise HCM Global Payroll Switzerland
- CVE-2026-91352Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91351Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).Oracle Outside In Technology
- CVE-2026-91339Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests).Oracle iSupport
- CVE-2026-91336Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris
- CVE-2026-91335Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91334Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIOOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-91333Vulnerability in Oracle Java SE (component: Security).Oracle Java SE
- CVE-2026-91332Vulnerability in Oracle Java SE (component: Networking).Oracle Java SE
- CVE-2026-91331Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application ObjectsOracle PeopleSoft Enterprise CC Common Application Objects
- CVE-2026-91330Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91329Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91324Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).Oracle Solaris
- CVE-2026-91322Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).Oracle JDeveloper
- CVE-2026-91320Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).Oracle JDeveloper
- CVE-2026-91319Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects).Oracle JDeveloper
- CVE-2026-91318Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).Oracle JDeveloper
- CVE-2026-91317Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding).Oracle JDeveloper
- CVE-2026-91312Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91309Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91302Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91301Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91300Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91298Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91297Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91294Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91293Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91292Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM).Oracle JD Edwards EnterpriseOne Localizations
- CVE-2026-91291Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91290Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91289Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91285Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2026-91284Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91283Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91282Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91281Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91280Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91279Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91278Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91277Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2026-91276Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2026-91275Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91274Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-91264Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise SCM Manufacturing
- CVE-2026-91263Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-91262Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-91261Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-91257Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests).Oracle iSupport
- CVE-2026-91249Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).Oracle Solaris
- CVE-2026-91248Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-91247Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-91246Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-91245Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-91244Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-91240Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-91210Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-91209Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System).Oracle Solaris
- CVE-2026-91208Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-87423Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System).Oracle Solaris
- CVE-2026-87422Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).Oracle Solaris
- CVE-2026-87418Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87416Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87415Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87414Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).Oracle Solaris
- CVE-2026-87413Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).Oracle Solaris
- CVE-2026-87412Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87411Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).Oracle Solaris
- CVE-2026-87410Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87409Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87407Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security).Oracle Applications Framework
- CVE-2026-87401Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87400Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87399Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87396Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87393Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2026-87392Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87391Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87390Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87389Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).Oracle JD Edwards EnterpriseOne Human Resources Management
- CVE-2026-87388Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management).Oracle JD Edwards EnterpriseOne Configurator
- CVE-2026-87387Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management).Oracle JD Edwards EnterpriseOne Homebuilder
- CVE-2026-87386Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation).Oracle JD Edwards EnterpriseOne General Ledger
- CVE-2026-87385Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).Oracle JD Edwards EnterpriseOne Human Resources Management
- CVE-2026-87384Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources).Oracle JD Edwards EnterpriseOne Human Resources Management
- CVE-2026-87383Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87382Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing).Oracle JD Edwards EnterpriseOne Operational Sourcing
- CVE-2026-87381Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-113730OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxiesorphan-oss ognl · ognl:ognl
- CVE-2026-87380Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry).Oracle JD Edwards EnterpriseOne Sales Order Entry
- CVE-2026-87379Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87378Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87377Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87376Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87375Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).Oracle WebCenter Content: Imaging
- CVE-2026-87374Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87373Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87372Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87371Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87370Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87367Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-87366Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).Oracle Applications Framework
- CVE-2026-87365Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87362Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).Oracle Agile PLM
- CVE-2026-87361Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87360Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87355Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87354Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator).Oracle TimesTen In-Memory Database
- CVE-2026-87353Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87352Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87350Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87349Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87348Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87345Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87344Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87343Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87342Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87340Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87339Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).Oracle Siebel CRM Integration
- CVE-2026-87338Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-87336Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87335Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations).Oracle Applications DBA
- CVE-2026-87334Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).Oracle JDeveloper
- CVE-2026-87333Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87332Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87331Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87330Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87329Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87328Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87327Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87326Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87325Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87324Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87323Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87321Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87320Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87319Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87318Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-87317Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2026-111879DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lockDBI
- CVE-2026-87311Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87303Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87299Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87298Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-87297Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Oracle Communications Billing and Revenue Management
- CVE-2026-87295Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll).Oracle HRMS
- CVE-2026-87294Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: SecuritOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-87293Vulnerability in Oracle Java SE (component: RMI).Oracle Java SE
- CVE-2026-87292Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-87291Vulnerability in Oracle Java SE (component: Networking).Oracle Java SE
- CVE-2026-87290Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-87255Vulnerability in Oracle Java SE (component: Compiler).Oracle Java SE
- CVE-2026-83427Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83406Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Oracle Communications Billing and Revenue Management
- CVE-2026-83401Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83400Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83395Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83394Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).Oracle Demand Planning
- CVE-2026-83392Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Manager
- CVE-2026-83391Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End).Oracle HRMS
- CVE-2026-83390Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Manager
- CVE-2026-83389Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83388Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Manager
- CVE-2026-83387Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83386Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83385Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83384Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83383Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83382Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83381Vulnerability in Oracle Java SE (component: Security).Oracle Java SE
- CVE-2026-83380Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83378Vulnerability in Oracle Java SE (component: Compiler).Oracle Java SE
- CVE-2026-83377Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications).Oracle HRMS
- CVE-2026-83376Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83375Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2026-83374Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: SecuritOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-83373Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83372Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83371Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83360Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll).Oracle HRMS
- CVE-2026-83359Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll).Oracle HRMS
- CVE-2026-83358Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-83139Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-73964Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-70869Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-70860Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement).Oracle PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-60968Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60964Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60887Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60885Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60882Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60881Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60878Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60876Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60874Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60869Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60839Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60819Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60814Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60809Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60746Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-60745Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60743Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60500Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-60453Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System).Oracle Solaris
- CVE-2026-101857Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-101856Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-101855Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-101850Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI).Oracle Installed Base
- CVE-2026-101846Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).Oracle Purchasing
- CVE-2026-101845Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).Oracle Purchasing
- CVE-2026-101844Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests).Oracle Concurrent Processing
- CVE-2026-101843Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).Oracle Production Scheduling
- CVE-2026-101836Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).Oracle iSupplier Portal
- CVE-2026-101832Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-108518DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with…DBI
- CVE-2026-101828Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-101821Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement).Oracle Compensation Workbench
- CVE-2026-101819Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).Oracle General Ledger
- CVE-2026-101814Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2026-101812Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-101807Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101806Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Oracle MySQL Connectors
- CVE-2026-101805Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Manager
- CVE-2026-101804Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Oracle MySQL Connectors
- CVE-2026-101803Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101802Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101801Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101800Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101799Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101798Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101795Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101794Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101793Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core).Oracle Communications BRM - Elastic Charging Engine
- CVE-2026-101792Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).Oracle Communications BRM - Elastic Charging Engine
- CVE-2026-101790Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).Oracle Communications BRM - Elastic Charging Engine
- CVE-2026-101789Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101788Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101787Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101784Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101782Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-101780Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101779Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101778Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101777Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101776Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101774Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101766Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101764Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101762Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101761Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101760Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101756Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101755Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101754Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101753Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101752Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101751Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101750Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101749Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101748Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101747Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101745Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101743Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101741Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101740Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101738Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101737Vulnerability in Oracle Java SE (component: Compiler).Oracle Java SE
- CVE-2026-101734Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-101733Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101732Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101731Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101730Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101729Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101728Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101727Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101726Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101725Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101724Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101723Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-101722Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101721Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101720Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101718Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-101717Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).Oracle Agile PLM
- CVE-2026-101716Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client).Oracle Agile PLM
- CVE-2026-101715Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-101714Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client).Oracle Agile PLM
- CVE-2026-101713Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-101711Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll).Oracle Payroll
- CVE-2026-101710Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101709Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101706Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-101701Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling).Oracle Concurrent Processing
- CVE-2026-101697Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI).Oracle One-to-One Fulfillment
- CVE-2026-101696Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-101695Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-101678Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2026-101677Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2026-101675Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101674Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101673Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations).Oracle US Federal Human Resources
- CVE-2026-101671Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component).Oracle Email Center
- CVE-2026-101670Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component).Oracle Email Center
- CVE-2026-101669Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing).Oracle Public Sector Human Resources
- CVE-2026-101668Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations).Oracle Customer Care
- CVE-2026-101667Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).Oracle Trade Management
- CVE-2026-101666Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).Oracle Trade Management
- CVE-2026-101651Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-101644Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Mobile Field Service
- CVE-2026-101639Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-101637Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101633Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-101632Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-101631Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).Oracle MySQL Router
- CVE-2026-101630Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations).Oracle Advanced Outbound Telephony
- CVE-2026-101629Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101628Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).Oracle MySQL Cluster
- CVE-2026-101627Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101626Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).Oracle MySQL Connectors
- CVE-2026-101625Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).Oracle MySQL Connectors
- CVE-2026-101624Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101623Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101622Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101621Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101620Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101619Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101618Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101617Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101616Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101615Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101614Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101613Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101612Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101611Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101610Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101609Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101608Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101607Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server · Oracle MySQL Cluster
- CVE-2026-101606Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Oracle Communications Billing and Revenue Management
- CVE-2026-101605Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-101601Vulnerability in Oracle GoldenGate (component: Vendor Access Module).Oracle GoldenGate
- CVE-2026-101600Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB).Oracle TimesTen In-Memory Database
- CVE-2026-101597Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).Oracle ZFS Storage Appliance Kit
- CVE-2026-101595Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain RelationsOracle Agile Product Lifecycle Management for Process
- CVE-2026-101592Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101591Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101589Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-101588Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).Oracle Helidon
- CVE-2026-101587Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1).Oracle Helidon
- CVE-2026-101586Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient).Oracle Helidon
- CVE-2026-101584Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket).Oracle Helidon
- CVE-2026-101582Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault).Oracle Helidon
- CVE-2026-101581Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin).Oracle Helidon
- CVE-2026-101580Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt).Oracle Helidon
- CVE-2026-101578Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login).Oracle Helidon
- CVE-2026-101577Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).Oracle Helidon
- CVE-2026-101576Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).Oracle Helidon
- CVE-2026-101575Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).Oracle Helidon
- CVE-2026-101574Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC).Oracle Helidon
- CVE-2026-101573Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth).Oracle Helidon
- CVE-2026-101571Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper).Oracle Helidon
- CVE-2026-101570Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).Oracle Helidon
- CVE-2026-101569Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits).Oracle Helidon
- CVE-2026-101568Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health).Oracle Helidon
- CVE-2026-101565Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import).Oracle Agile PLM
- CVE-2026-101564Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect).Oracle Agile PLM
- CVE-2026-101559Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document).Oracle Purchasing
- CVE-2026-101558Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals).Oracle Purchasing
- CVE-2026-101553Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries).Oracle Payroll
- CVE-2026-101547Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).Oracle Demand Planning
- CVE-2026-101539Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Oracle Payroll
- CVE-2026-101538Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-101533Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).Oracle EDI Gateway
- CVE-2026-101524Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework).Oracle Enterprise Manager Base Platform
- CVE-2026-101522Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB).Oracle TimesTen In-Memory Database
- CVE-2026-101517Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-101516Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: LibrariOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2026-101515Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle WebLogic Server
- CVE-2026-101513Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB).Oracle MySQL Cluster
- CVE-2026-101512Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-101511Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin).Oracle Enterprise Manager Base Platform
- CVE-2026-101510Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Net Services
- CVE-2026-101507Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).Oracle Trusted Answer Search
- CVE-2026-101502Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).Oracle Trusted Answer Search
- CVE-2026-101500Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensOracle Global Lifecycle Management OPatchAuto
- CVE-2026-101497Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework).Oracle Identity Manager
- CVE-2026-101493Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101492Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).Oracle Siebel CRM Integration
- CVE-2026-101491Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101490Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101489Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101488Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101487Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101486Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101485Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).Oracle Autonomous Health Framework
- CVE-2026-101483Vulnerability in Oracle Secure Backup (component: Device Management and Support).Oracle Secure Backup
- CVE-2026-101480Vulnerability in Oracle Secure Backup (component: NDMP daemon).Oracle Secure Backup
- CVE-2026-101476Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101475Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging).Oracle Primavera Unifier
- CVE-2026-101474Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2026-101472Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-101471Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-101470Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-101465Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101462Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101456Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).Oracle Siebel CRM Development
- CVE-2026-101455Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).Oracle Siebel CRM Development
- CVE-2026-101454Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).Oracle Siebel CRM Development
- CVE-2026-101453Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-101449Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-101448Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-101445Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101444Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101443Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101442Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101441Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101440Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101439Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101437Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101436Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-101435Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101433Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101432Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101430Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101426Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101425Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101424Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101423Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101419Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101418Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101417Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101415Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101414Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101413Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101412Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101408Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101407Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101406Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101405Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101404Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101403Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101402Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101401Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101400Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101399Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101397Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101396Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101395Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101394Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101393Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101392Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101391Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-101389Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-101386Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101385Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101384Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101383Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101382Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101381Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101380Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101379Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101378Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101377Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101376Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101375Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101374Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).Oracle REST Data Services
- CVE-2026-101373Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101372Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101371Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101370Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101369Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).Oracle REST Data Services
- CVE-2026-101368Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).Oracle REST Data Services
- CVE-2026-101367Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101366Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101365Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101364Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101363Vulnerability in Oracle REST Data Services (component: Graph QL).Oracle REST Data Services
- CVE-2026-101362Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101361Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101360Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101359Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-113122Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox Google Chrome
- CVE-2026-113237Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crGoogle Chrome
- CVE-2026-113066Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a craftedGoogle Chrome
- CVE-2026-113038Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandboGoogle Chrome
- CVE-2026-113047Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandGoogle Chrome
- CVE-2026-113296Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox vGoogle Chrome
- CVE-2026-113223Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandboGoogle Chrome
- CVE-2026-113201Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sanGoogle Chrome
- CVE-2026-113340Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insideGoogle Chrome
- CVE-2026-113157Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via Google Chrome
- CVE-2026-113143Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page.Google Chrome
- CVE-2026-113050Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted Google Chrome
- CVE-2026-113297Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a craftGoogle Chrome
- CVE-2026-113199Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a craGoogle Chrome
- CVE-2026-113002Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insiGoogle Chrome
- CVE-2026-113159Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive informatGoogle Chrome
- CVE-2026-113151Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafteGoogle Chrome
- CVE-2026-113304Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside tGoogle Chrome
- CVE-2026-113178Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside theGoogle Chrome
- CVE-2026-113077Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the Google Chrome
- CVE-2026-113326Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside Google Chrome
- CVE-2026-113277Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sGoogle Chrome
- CVE-2026-113054Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via Google Chrome
- CVE-2026-113144Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafteGoogle Chrome
- CVE-2026-113139Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandboGoogle Chrome
- CVE-2026-113246Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insidGoogle Chrome
- CVE-2026-113329Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insidGoogle Chrome
- CVE-2026-113010Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cGoogle Chrome
- CVE-2026-113224Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memoGoogle Chrome
- CVE-2026-113325Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside thGoogle Chrome
- CVE-2026-113045Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insGoogle Chrome
- CVE-2026-113137Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandGoogle Chrome
- CVE-2026-113196Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy…Google Chrome
- CVE-2026-113051Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox viaGoogle Chrome
- CVE-2026-113209Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insidGoogle Chrome
- CVE-2026-113057Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy…Google Chrome
- CVE-2026-113129Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive informGoogle Chrome
- CVE-2026-113333Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandGoogle Chrome
- CVE-2026-113026Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside tGoogle Chrome
- CVE-2026-113070Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via aGoogle Chrome
- CVE-2026-113035Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox viGoogle Chrome
- CVE-2026-113142Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandGoogle Chrome
- CVE-2026-113102Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cGoogle Chrome
- CVE-2026-113212Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page.Google Chrome
- CVE-2026-113295Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandboGoogle Chrome
- CVE-2026-113309Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafteGoogle Chrome
- CVE-2026-113310Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crGoogle Chrome
- CVE-2026-113225Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insiGoogle Chrome
- CVE-2026-113322Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox viGoogle Chrome
- CVE-2026-113193Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via Google Chrome
- CVE-2026-113082Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insideGoogle Chrome
- CVE-2026-113098Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the saGoogle Chrome
- CVE-2026-113341Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside Google Chrome
- CVE-2016-20102JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameterJavaMelody
- CVE-2014-125132Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.phpJason Newman Blogroll Fun
- CVE-2014-125131DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.phpDedeCMS
- CVE-2012-20005SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg ParameterŁukasz Więcek SocialFit
- CVE-2012-20004K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff ParameterCarles Reverter K-news
- CVE-2012-20003Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.phpWeb Updates KMU Custom Tables
- CVE-2026-105960HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter InconsistencyHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-110322HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer DereferenceHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-101103HMS Networks PEAK-System PCAN Windows drivers Classic Buffer OverflowHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-109576HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds WriteHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-113724virtualenv: Deletion recovery can change a symlink target's modepypa virtualenv · virtualenv
- CVE-2026-107692War Thunder Account ImpersonationGaijin Entertainment War Thunder
- CVE-2026-113721virtualenv: Generated files can follow existing destination linkspypa virtualenv · virtualenv
- CVE-2026-113720virtualenv: Seeded files retain permissions from an older cachepypa virtualenv · virtualenv
- CVE-2026-113715virtualenv: Venv configuration readback can reinterpret path boundariespypa virtualenv · virtualenv
- CVE-2026-113719virtualenv: Seed replacement does not contain metadata deletion pathspypa virtualenv · virtualenv
- CVE-2026-113717virtualenv: Pip seeding with download omits wheel digest verificationpypa virtualenv · virtualenv
- CVE-2026-113716virtualenv: Builtin creation follows linked environment directoriespypa virtualenv · virtualenv
- CVE-2026-113869Use-after-free in S/MIME decryption during a security device password promptMozilla Thunderbird
- CVE-2026-113868Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authenticationMozilla Thunderbird
- CVE-2026-113866Account password sent unencrypted during Exchange account setupMozilla Thunderbird
- CVE-2026-113712Cachet has Stored XSS in Incident Componentcachethq cachet · cachethq/cachet
- CVE-2026-113714virtualenv: Downloaded wheel selection and caching precede verificationpypa virtualenv · virtualenv
- CVE-2026-113713virtualenv: Temporary app-data can leave dangling seed package linkspypa virtualenv · virtualenv
- CVE-2026-111088Stored XSS in the VPN logs monitorStormshield Network Security
- CVE-2026-100132Acrobat for Edge | Out-of-bounds Read (CWE-125)Adobe Acrobat for Edge
- CVE-2026-113643EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorizationEspoCRM
- CVE-2026-112861WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerabilityxnau webdesign Participants Database
- CVE-2026-113710ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessingapostrophecms apostrophe · apostrophe
- CVE-2026-113671ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRFapostrophecms apostrophe · @apostrophecms ai-helper +1
- CVE-2026-113669ApostropheCMS: Cross-domain session token in URL confers session takeoverapostrophecms apostrophe · @apostrophecms passport-bridge +2
- CVE-2026-113667ApostropheCMS: CAPTCHA response token not URL-encodedapostrophecms apostrophe · @apostrophecms form +5
- CVE-2026-113668ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)apostrophecms apostrophe · apostrophe
- CVE-2026-113507aaPanel common.py GetClientIp access controlaaPanel
- CVE-2026-113665ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpointsapostrophecms apostrophe · apostrophe
- CVE-2026-113664ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring testapostrophecms apostrophe · @apostrophecms import-export +1
- CVE-2026-113662ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified documentapostrophecms apostrophe · @apostrophecms import-export +1
- CVE-2026-113661ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLsapostrophecms apostrophe · apostrophecms sanitize-html +1
- CVE-2026-113660ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiersapostrophecms apostrophe · apostrophe
- CVE-2026-113659ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated usersapostrophecms apostrophe · apostrophe
- CVE-2026-92539Cross-organization user modification and deletion via the SCIM API in Grafana EnterpriseGrafana Enterprise
- CVE-2026-113657ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)apostrophecms apostrophe · apostrophecms sanitize-html +1
- CVE-2026-113656ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoSapostrophecms apostrophe · @apostrophecms form +1
- CVE-2026-113649ApostropheCMS: Import API bypasses publication roles for protected contentapostrophecms apostrophe · @apostrophecms import-export +2
- CVE-2026-113655ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorizationapostrophecms apostrophe · apostrophe
- CVE-2026-113654ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content renderapostrophecms apostrophe · apostrophecms sanitize-html +1
- CVE-2026-113653ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)apostrophecms apostrophe · apostrophe
- CVE-2026-113652ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)apostrophecms apostrophe · apostrophecms uploadfs +1
- CVE-2026-28330SolarWinds Observability Self-Hosted Cross-Site Scripting VulnerabilitySolarWinds Observability Self-Hosted
- CVE-2026-28329SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)SolarWinds Observability Self-Hosted
- CVE-2026-113651ApostropheCMS: Path traversal in uploadfsapostrophecms apostrophe · apostrophecms uploadfs +1
- CVE-2026-113650ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)apostrophecms apostrophe · apostrophecms sanitize-html +1
- CVE-2026-113505aaPanel Download Endpoint v2.py send_file path traversalaaPanel
- CVE-2026-28331SolarWinds Patch Manager Sensitive Information Exposure VulnerabilitySolarWinds Patch Manager
- CVE-2026-113648ApostropheCMS: Missing Authentication in `cleanExport` Routeapostrophecms apostrophe · @apostrophecms import-export +1
- CVE-2026-112958ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serializationapostrophecms apostrophe · apostrophe
- CVE-2026-112957ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged usersapostrophecms apostrophe · apostrophe
- CVE-2026-112956ApostropheCMS: Archive duplicate continuation lets contributors overwrite published contentapostrophecms apostrophe · @apostrophecms mport-export +1
- CVE-2026-112955ApostropheCMS: Import archives can exhaust server storage and deny serviceapostrophecms apostrophe · @apostrophecms import-export +1
- CVE-2026-112954ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST APIapostrophecms apostrophe · apostrophe
- CVE-2026-112953ApostropheCMS: Exposure of Sensitive Information via predictable export filenamesapostrophecms apostrophe · @apostrophecms import-export +1
- CVE-2026-112952ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated userapostrophecms apostrophe · apostrophe
- CVE-2026-107755Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLsApache Software Foundation Apache CouchDB
- CVE-2026-113683VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filenamejcrodriguez-dis moodle-mod_vpl
- CVE-2026-113681OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds ReadAcademySoftwareFoundation OpenImageIO
- CVE-2026-113680HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoSharfbuzz
- CVE-2026-113677Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete APIfroxlor
- CVE-2026-113676Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get APIfroxlor
- CVE-2026-113612SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE EndpointCodeWithCJ SparkyFitness
- CVE-2026-113611Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptionsoutline
- CVE-2026-113610Xen Orchestra before 6.9.0 Authorization Bypass via user.set APIvatesfr xen-orchestra
- CVE-2026-113609Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell ScriptsBandisoft Bandizip
- CVE-2026-113608Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_varjleyva moodle-block_configurablereports
- CVE-2026-113604Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header CountsNationalSecurityAgency ghidra
- CVE-2026-113603x402 @x402/extensions 2.3.1 through 2.28.0 SIWX Payment Bypass via PaymentPayload.resourcex402-foundation @x402/extensions · x402-foundation x402 +1
- CVE-2026-113602json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Characterjson-smart
- CVE-2026-113601Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivityusememos memos
- CVE-2026-113600Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroyfatfreecrm fat_free_crm
- CVE-2026-113599Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creationmodoboa
- CVE-2026-113598Modoboa before 2.8.0 IDOR via API v2 alarms bulk_deletemodoboa
- CVE-2026-113597Blinko through 1.8.8 IDOR via Tag tRPC Router Proceduresblinkospace blinko
- CVE-2026-113596Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIdswebstudio-is webstudio
- CVE-2026-113595Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Routesharkord
- CVE-2026-113594Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Routesharkord
- CVE-2026-113359Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values EndpointBaserow
- CVE-2026-90799Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence valuesApache Software Foundation Apache CouchDB
- CVE-2026-90798Apache CouchDB: Replicator follows redirects indefinitelyApache Software Foundation Apache CouchDB
- CVE-2026-112951ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefixapostrophecms apostrophe · apostrophe
- CVE-2026-93003NetX Duo Web HTTP server interprets request body content as HTTP header fieldsEclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-112950Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fixvitest-dev vitest · @vitest mocker +1
- CVE-2026-94202Module block-pool create validates two of the four parameter words it readsEclipse Foundation Eclipse ThreadX
- CVE-2026-95108Deleting a user-mode module thread leaks its privileged kernel stackEclipse Foundation Eclipse ThreadX
- CVE-2026-112949Vitest: Code injection via unauthenticated manual mock registrationvitest-dev vitest · @vitest mocker +1
- CVE-2026-94024Module Manager object lookup validates one byte of a module's search nameEclipse Foundation Eclipse ThreadX
- CVE-2026-94023Module delete dispatchers do not enforce kernel-object ownership before irreversible deletionEclipse Foundation Eclipse ThreadX
- CVE-2026-112948Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token filevitest-dev vitest · @vitest browser +5
- CVE-2026-112823WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-112824WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerabilityMagepeople Bus Ticket Booking with Seat Reservation
- CVE-2026-111843WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityCozyThemes Rootblox
- CVE-2026-112829WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerabilityArraytics Booktics
- CVE-2026-112840WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureCart
- CVE-2026-112947Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`vitejs vite · vitejs vite-plus +2
- CVE-2026-109700WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerabilityeLightUp Meta Box – WordPress Custom Fields Framework
- CVE-2026-112946Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machinevitejs vite · vitejs vite-plus +2
- CVE-2026-111763A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirecta2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-parent
- CVE-2026-91057Out-of-bounds read when a multi-line text view string ends with a carriage returnEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-112945Vite: Cross origin script execution through Vite custom middlewarevitejs vite · vitejs vite-plus +2
- CVE-2026-92454JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decodeEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-112944launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editorsvitejs launch-editor · vitejs vite +4
- CVE-2026-111762A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failurea2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-trans…
- CVE-2026-111761A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification deliverya2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…
- CVE-2026-91059JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation sizeEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-112834WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerabilityCastos Seriously Simple Podcasting
- CVE-2026-112943launch-editor: escapeCmdArgs() omits % escaping on Windowsvitejs launch-editor · vitejs vite +4
- CVE-2026-112833WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerabilityCastos Seriously Simple Podcasting
- CVE-2026-92446GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loaderEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-92449Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arenaEclipse Foundation Eclipse ThreadX - GUIX
- CVE-2026-113466MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded keyMinIO
- CVE-2026-112941filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the locktox-dev filelock · filelock
- CVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markertox-dev filelock · filelock
- CVE-2026-112937filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory nametox-dev filelock · filelock
- CVE-2026-95111Module queue front-send validates a word count as a byte countEclipse Foundation Eclipse ThreadX
- CVE-2026-112936filelock: ReadWriteLock follows a symlink at the lock path into SQLitetox-dev filelock · filelock
- CVE-2026-112935filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holderstox-dev filelock · filelock
- CVE-2026-96402USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle countEclipse Foundation Eclipse ThreadX - USBX
- CVE-2026-112934filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordtox-dev filelock · filelock
- CVE-2026-113411Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url schemeNerimity Desktop
- CVE-2026-112915filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeouttox-dev filelock · filelock
- CVE-2026-112914filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directorytox-dev filelock · filelock
- CVE-2026-112912filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takertox-dev filelock · filelock
- CVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusiontox-dev filelock · filelock
- CVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathtox-dev filelock · filelock
- CVE-2026-113397DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injectionDrayTek Vigor2960
- CVE-2026-112906filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reusetox-dev filelock · filelock
- CVE-2026-97400jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)Eclipse Foundation Eclipse OpenJ9
- CVE-2026-113396DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injectionDrayTek Vigor2960
- CVE-2026-113395DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversalDrayTek Vigor2960
- CVE-2026-74049Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)Apache Software Foundation Apache Tomcat
- CVE-2026-74048Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-upApache Software Foundation Apache Tomcat
- CVE-2026-113394DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversalDrayTek Vigor2960
- CVE-2026-96406VIDEO class descriptor walk consumes device-controlled wTotalLength as its boundEclipse Foundation Eclipse ThreadX - USBX
- CVE-2026-113393DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted uploadDrayTek Vigor2960
- CVE-2026-96582Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor ParserEclipse Foundation Eclipse ThreadX - USBX
- CVE-2026-113392DrayTek Vigor2960 Apmupload mainfunction.cgi path traversalDrayTek Vigor2960
- CVE-2026-113401Denial-of-service in the PDF Viewer componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-113400Uninitialized memory in the Audio/Video: cubeb componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-113470Cryptographic issue in the Security Block-lists, Allow-lists, and other State componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-34484A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)Nokia 1830 Global Express
- CVE-2026-113388opensource-socialnetwork Cache Settings dynamic.php input code injectionopensource-socialnetwork
- CVE-2026-113583Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.jscypht-org cypht
- CVE-2026-18205XSS in Ticimax Informatics' Ticimax E-Commerce PlatformTicimax Informatics Technologies Ticimax E-Commerce Platform
- CVE-2026-113385LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application componentsLeeDrOiD Labs Shortcutter 2 App
- CVE-2026-113496Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line argumentsRed Hat Enterprise Linux
- CVE-2026-113495Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line argumentsRed Hat Enterprise Linux
- CVE-2026-113384Optimal IdM OptimalCloud social redirectOptimal IdM OptimalCloud
- CVE-2026-113383Optimal IdM OptimalCloud Login cross site scriptingOptimal IdM OptimalCloud
- CVE-2026-113357@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Markertester-army @e2e-dev/github
- CVE-2026-113355Chatwoot before 4.14.0 Stored XSS via Help Center Video Embed Linkschatwoot
- CVE-2026-113353LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX HandlersThimPress LearnPress
- CVE-2026-113350react-admin before 5.15.5 Stored XSS via UrlField and FileFieldmarmelab react-admin
- CVE-2026-113349OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEventOpenCATS
- CVE-2026-112787OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO ReportsOpenCATS
- CVE-2026-112786OpenCATS before 0.10.0 Missing Authorization via Import Revert ActionOpenCATS
- CVE-2026-112785OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX EndpointsOpenCATS
- CVE-2026-112784OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.phpOpenCATS
- CVE-2026-112783OpenCATS before 0.10.0 Missing Authorization via Activity AJAX EndpointsOpenCATS
- CVE-2026-113382arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted uploadarizu-id fast-tunnel
- CVE-2026-107597jwks_uri from the OIDC discovery document is fetched without checking its origin or schemeEclipse Foundation Eclipse CSI - PIA
- CVE-2026-108062Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loopEclipse Foundation Eclipse CSI - PIA
- CVE-2026-111844WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerabilityBrizy
- CVE-2026-113381Osclass Item Model Item.php findUserItems sql injectionOsclass
- CVE-2026-112069Broken Access Control in extension "FAL Protect" (fal_protect)TYPO3 Extension "FAL Protect"
- CVE-2026-112065Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112067Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 Extension "Accessible Form Captcha"
- CVE-2026-112068Insecure Direct Object Reference in extension "Analytics" (analytics)TYPO3 Extension "Analytics"
- CVE-2026-112237Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)TYPO3 Extension "Kitodo.Presentation"
- CVE-2026-112240Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)Extension "TYPO3 Fluid-Form by coding.ms"
- CVE-2026-113442Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)Extension "TYPO3 Fluid-Form by coding.ms"
- CVE-2026-112071Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)Extension "TYPO3 Shop by coding.ms"
- CVE-2026-113468Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)Extension "TYPO3 Shop by coding.ms"
- CVE-2026-112070Broken Access Control in extension "Analytics" (analytics)TYPO3 Extension "Analytics"
- CVE-2026-113378mcollina mcp-ripgrep Advanced Search Tool index.ts os command injectionmcollina mcp-ripgrep
- CVE-2026-43854A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled Advantech ADAM-3600
- CVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.Advantech ADAM-3600
- CVE-2026-43848A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.Advantech ADAM-3600
- CVE-2026-43843An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.Advantech ADAM-3600
- CVE-2026-43842A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theAdvantech ADAM-3600
- CVE-2026-43841A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theAdvantech ADAM-3600
- CVE-2026-43840A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theAdvantech ADAM-3600
- CVE-2026-101201QBinaryJson::fromBinaryData() integer overflow leading to OOB readqt
- CVE-2026-11960Multiple vulnerabilities in FacturaScriptsFacturaScripts
- CVE-2026-11959Multiple vulnerabilities in FacturaScriptsFacturaScripts
- CVE-2026-113465Possible DOM XSS in SNS Web Administration PortalStormshield Network Security
- CVE-2024-2323Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account DiscoveryWSO2 Enterprise Integrator · WSO2 Identity Server +4
- CVE-2026-110725fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesfast-uri
- CVE-2026-110306fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingfast-uri
- CVE-2026-110180fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationfast-uri
- CVE-2026-110095fast-uri vulnerable to improper path equivalence in relative reference normalizationfast-uri
- CVE-2026-93878DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX ActionDiviGear Carousel
- CVE-2026-112148A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an LY LIFF SDK
- CVE-2026-96903Easy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX HandlersEasy Property Listings
- CVE-2026-96902Easy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST APIEasy Property Listings
- CVE-2026-100737Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.Atsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8
- CVE-2026-109831UnRTF by GNU Project is vulnerable to out-of-bounds write.GNU Project UnRTF
- CVE-2026-12489An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could alZyxel EX3501-T0 firmware
- CVE-2026-75753Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTASUS Router
- CVE-2026-86981An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-86979A privacy issue was addressed with improved checks.Apple macOS
- CVE-2026-86976An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86975An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86963A denial-of-service issue was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2026-86962A double free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86959An input validation issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86957An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86955An authorization issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2026-86953An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86944An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-86940This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2026-86935This issue was addressed by removing additional entitlements.Apple macOS
- CVE-2026-86933A permissions issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2026-86932An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-86928A path handling issue was addressed with improved validation.Apple macOS
- CVE-2026-86921A permissions issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-86918An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86915A race condition was addressed with improved locking.Apple macOS
- CVE-2026-86914An information disclosure issue was addressed with improved state management.Apple macOS
- CVE-2026-86913A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-86907An authorization issue was addressed with improved entitlement checks.Apple macOS
- CVE-2026-86875An input validation issue was addressed with improved input validation.Apple Xcode
- CVE-2026-86874An out-of-bounds read was addressed with improved input validation.Apple Xcode
- CVE-2026-86872A logic issue was addressed with improved state management.Apple Safari · Apple visionOS +1
- CVE-2026-86871An integer underflow was addressed with improved input validation.Apple macOS
- CVE-2026-84613An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-84582A privacy issue was addressed with improved access restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-84579A logic issue was addressed with improved checks.Apple macOS
- CVE-2026-84547A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2026-84508This issue was addressed with improved validation of the caller's access.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-84490This issue was addressed through improved state management.Apple iOS and iPadOS
- CVE-2026-65396A buffer overflow was addressed with improved size validation.Apple macOS
- CVE-2026-65379The issue was addressed with improved handling of secure input state.Apple macOS
- CVE-2026-65372A race condition was addressed with additional validation.Apple macOS
- CVE-2026-65356An access issue was addressed with improved access controls.Apple macOS
- CVE-2026-28850An authorization issue was addressed with improved state management.Apple macOS · Apple visionOS
- CVE-2026-105298Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypasshttps://github.com/cloudflare/pingora · pingora-core
- CVE-2026-109441LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridgeginlix-ai LangAlpha
- CVE-2025-60475A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a
- CVE-2025-60494A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows atta
- CVE-2025-60496A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attacke