CVE-2026-60080

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure. Users are recommended to upgrade to version 1.4.0, which...

CVE-2026-64131

A flaw was found in the Linux kernel's memory management subsystem. The unmapping process for device-private and exclusive memory pages incorrectly checks if a virtual memory area VMA is anonymous. This can lead to spurious warnings during process teardown when a folio is part of a private...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

CVE-2026-63818

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could...

CVE-2026-64082

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's handling of process tracing and signal restoration. When functions like compatriscvgprset or compatrestoresigcontext are invoked, they may process uninitialized stack data if a preceding user data copy operation...

CVE-2026-53376

A flaw was found in the AMD Kernel Fusion Driver AMDKFD in the Linux kernel. This vulnerability exists in the kfdioctlgetprocessaperturesnew function, where a missing upper bound check for the numofnodes argument could allow a local attacker to provide an excessively large value. This could lead ...

CVE-2026-64179

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN Inter-Integrated Circuit I2C Over Shared Memory IOSM subsystem. This vulnerability occurs because memory allocated during the initialization of the inter-process communication IPC protocol is not properly released when certain...

ASUS Router Command Injection Vulnerability (CNVD-2026-30681)

ASUS Router is the router firmware and management system from ASUS, used for network connection configuration and device management. The ASUS Router has a command injection vulnerability. This vulnerability arises due to improper validation of the integrity check value and certificate verificatio...

PT-2026-63236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.5 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-63212

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Regulatory Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-63176

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.14 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product. A low privileged attacker with network access via HTTP can...

PT-2026-63211

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Regulatory Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can...

PT-2026-63202

Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite component: Internal Operations. The supported version that is affected is 12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-62989

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-63062

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description An issue exists in the Installation component of the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain. An unauthenticated...

PT-2026-63065

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Product Quality Management component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires...

PT-2026-63063

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Product Quality Management component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-63068

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description An issue exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process. An unauthenticated attacker with network acce...

PT-2026-63067

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description An issue exists in the Reporting component of Oracle Agile Product Lifecycle Management for Process. An unauthenticated attacker with network access via HTTP can...

PT-2026-63072

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Installation component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...