PT-2026-119486

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Engineering versions 12.2.3 through 12.2.15 Description An issue exists in the Change Management component of Oracle Engineering. An unauthenticated attacker with network access via HTTP can exploit this flaw to...

CVE-2026-73964: Oracle Database: Critical Patch Update - October 2026

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

PT-2026-120144

Name of the Vulnerable Software and Affected Versions Imager::File::GIF versions prior to 1.006 Imager affected versions not specified Description An issue exists when consolidating GIF images where palette indices are used without verifying the colour table bounds. Specifically, the i readgif lo...

Google Chrome Vulnerability: CVE-2026-113340

Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Azul Zulu: CVE-2026-91402: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to...

Google Chrome Vulnerability: CVE-2026-113233

Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-118466

Name of the Vulnerable Software and Affected Versions Stirling-PDF versions 3.0.0 through 3.2.0 Description An authorization bypass allows authenticated users to access files stored by other users by directing a processing folder toward the server storage directory. An attacker can utilize the...

PT-2026-118285

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

PT-2026-118799

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the FileSystem component. This allows a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. An out of bounds read...

PT-2026-119271

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Google Chrome Vulnerability: CVE-2026-113277

Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113325

Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-119085

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.9 Description A flaw in the Marketing component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-120316

Summary A small attacker-supplied TIFF can be opened and loaded normally, then reach an out-of-bounds read when an application saves it back to TIFF with retained metadata. The fixed reproducer is a 1×1, 16-bit grayscale, PackBits-compressed TIFF containing tag 320 ColorMap with 768 SHORT values:...

PT-2026-119418

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product. An unauthenticated attacker with network access vi...

Oracle MySQL Vulnerability CVE-2026-101777

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privilege...

PT-2026-119450

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privilege...

PT-2026-119268

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-119275

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Supply Chain Relationship Mgmt. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-119264

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...