PT-2026-119463

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

PT-2026-119792

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content...

PT-2026-120104

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may...

Red Hat: CVE-2026-101201: qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJson

A malformed header in the binary file fed to QBinaryJson::fromBinaryData can cause undefined behaviour because of out-of-bounds read...

PT-2026-117953

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update meta, batch...

PT-2026-118408

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GX SUCCESS and publishes a GX PIXELMAP whos...

PT-2026-118742

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description An out of bounds read occurs in the Offline component, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of...

PT-2026-118699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Transactions Platform allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-119001

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Memory corruption in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update to version...

PT-2026-118930

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description An out of bounds read in Core allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. An out of bounds read occurs whe...

PT-2026-118767

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the GetUserMedia function. This allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. Recommendations Update...

PT-2026-119067

Vulnerability in Oracle REST Data Services component: ADP. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

PT-2026-118338

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, an...

PT-2026-119897

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

Google Chrome Vulnerability: CVE-2026-113201

Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-119534

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Web Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-119901

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud...

Google Chrome Vulnerability: CVE-2026-113225

Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-119788

Vulnerability in the Oracle Solaris product of Oracle Systems component: Services. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability ca...

PT-2026-119903

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...