Oracle CVEs
9,094 CVEs and advisories name Oracle as an affected vendor, 28 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46833Vulnerability in the Net Service component of Oracle Database Server.
- CVE-2026-46830Vulnerability in Oracle REST Data Services (component: Mongoapi).
- CVE-2026-46829Vulnerability in Oracle REST Data Services (component: Mongoapi).
- CVE-2026-46828Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
- CVE-2026-46827Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager).
- CVE-2026-46826Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
- CVE-2026-46824Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration).
- CVE-2026-46823Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization).
- CVE-2026-46822Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations).
- CVE-2026-46821Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).
- CVE-2026-46820Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).
- CVE-2026-46819Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations).
- CVE-2026-46818Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).
- CVE-2026-46817Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).
- CVE-2026-46775Vulnerability in Oracle REST Data Services (component: Core).
- CVE-2026-35277Vulnerability in Oracle REST Data Services (component: Core).
- CVE-2026-35266Vulnerability in Oracle REST Data Services (component: Core).
- CVE-2026-34311Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).
- CVE-2026-35255Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects.
- CVE-2026-35254Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects.
- CVE-2026-35253Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects.
- CVE-2026-35228Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects (component: helper tool).
- CVE-2026-35233An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field.
- CVE-2026-21996An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in
- CVE-2026-35252Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API).
- CVE-2026-35251Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-35250Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-35249Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-35248Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-35247Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).