EUVD-2026-79474

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

EUVD-2026-79446

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

EUVD-2026-79399

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-79343

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-83015

A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Cube Manager ) affects supported versions 8.61–8.63 . The flaw allows a low-privileged, local attacker with logon access to compromise the application, resulting in full confidentiality, integrity, and availability impact (i....

EUVD-2026-79344

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

EUVD-2026-79324

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2026-82996

CVE-2026-82996 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with logon to the infrastructure where the product executes can exploit...

CVE-2026-82992

Oracle Siebel CRM (component: Installation ) is affected by a local privilege escalation vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can compromise the component, resulting in a full takeov...

CVE-2026-88922 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56979

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56985

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79003

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58698

A permission bypass vulnerability exists in the ap_pmic_poll_msg_handler function within the ap_pmic_ipc.c component. This issue is caused by a confused deputy scenario, which could allow an attacker to achieve a local escalation of privilege to System execution privileges . Exploitation of this ...

CVE-2026-58698

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...