PT-2026-119072

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data...

PT-2026-119272

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-118792

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read occurs in Focus, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. An out of bounds read is a...

PT-2026-118414

A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer the privileged queue copy may touch and hands that extent to the module port's range check. A queue's tx queue message size is a count of ULONGs and the cop...

PT-2026-118834

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption exists within the Extensions component, which could allow a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. Recommendations...

PT-2026-119418

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product. An unauthenticated attacker with network access vi...

Apache jclouds 2.7.0 XML External Entity Injection

Apache jclouds version 2.7.0 contains an XML External Entity injection vulnerability in provider-response parsing that may allow local file disclosure or server-side request forgery when a parsed endpoint is attacker controlled. !/usr/bin/env bash Apache jclouds 2.7.0 XML External Entity XXE...

PT-2026-119030

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Extensions allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. A sandbox is a security mechanism for separating...

PT-2026-118266

Name of the Vulnerable Software and Affected Versions Qt affected versions not specified Description An out-of-bounds read occurs when a malformed header is processed in a binary file passed to the QBinaryJson::fromBinaryData function, leading to undefined behavior. An out-of-bounds read is a...

PT-2026-119696

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content:...

PT-2026-118839

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Extensions allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. A sandbox is a security mechanism for separating...

Google Chrome Vulnerability: CVE-2026-113010

Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-119727

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw exists in the Report Distribution component. A high privileged attacker with network access via HTTP can exploit this issue to gain unauthorized...

PT-2026-118840

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on top of other graphics APIs, allows a remote attacker to read memory by inducing the user to visit ...

Google Chrome Vulnerability: CVE-2026-113066

Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-118687

Name of the Vulnerable Software and Affected Versions EyeLock nano NXT version 3.05.1193 EyeLock nano NXT version 3.04.1108 EyeLock nano NXT version 3.03.944 EyeLock nano NXT version 3.01.646 Description Unauthenticated attackers can read arbitrary local system files due to a path traversal issue...

PT-2026-119577

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

RockyLinux 8 : webkit2gtk3 (RLSA-2026:84584)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84584 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

MiracleLinux 8 : webkit2gtk3-2.54.1-1.el8_10.ML.1 (AXSA:2026-2101:11)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2101:11 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Goog...

PT-2026-119866

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1.1 Description An issue in the AWT componen...