CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

EUVD-2026-79579

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of...

CVE-2026-83227

Oracle Siebel CRM Integration (component EAI ) contains a vulnerability affecting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit . Successful exploitation results in takeover ...

CVE-2026-83192

Oracle Siebel CRM End User (component: Open UI ) is affected by a vulnerability in supported versions 17.0 through 26.7 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise the product, with a high complexity requirement (described as "difficult to exploit"). S...

EUVD-2026-79544

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of th...

EUVD-2026-79536

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Obje...

CVE-2026-83184

Oracle Application Object Library (component: Core) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

EUVD-2026-79528

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79339

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-79318

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Cloud Gateway. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful...

EUVD-2026-79506

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79021

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79019

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79017

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58747

In smmudetachdev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58718

In smmudetachdevnested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

A logic error in the Bootloader component allows for a permission bypass , which could lead to a local escalation of privilege requiring System execution privileges . This vulnerability affects Google Pixel devices. Exploitation does not require user interaction. Security patch levels of 2026-09-...