PT-2026-92770

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Forge component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the...

PT-2026-92343

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing permission check in the Setup Wizard allows for remote package installation. This flaw enables remote escalation of privilege without requiring...

PT-2026-92335

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A type confusion issue exists in multiple files, allowing an attacker to obtain signatures. This flaw enables local escalation of privilege without requiring...

PT-2026-92729

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

PT-2026-92708

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-93093

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description An issue in the Core component allows an unauthenticated attacker with logon access to the infrastructure where the software executes to compromise the system. Successful exploitation requires...

PT-2026-92716

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Life Sciences versions 17.0 through 26.7 Description A flaw in the Life Sciences component allows a low-privileged attacker with access to the infrastructure where the application executes to compromise the...

PT-2026-92297

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a pointer after it has been freed. This could all...

PT-2026-92659

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15 Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. The attack requires human interaction and can lead to...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Browser History component of Google Chrome prior to version 112.0.5615.49 allowed a remote attacker who convinced a user to perform certain UI interactions to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.10, Linux

In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out-of-bounds write due to improper input validation. This could lead to a local escalation of privileges, as the system requires execution privileges to exploit the vulnerability. User interaction is not required for exploitation. Product...

Astra Linux – Vulnerability in Chromium

Before version 101.0.4951.41, using the "After Free" feature in Google Chrome on a Mac allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page. This attacker could convince a user to perform certain user interactions, thereby enabling them to exploit the syst...

Astra Linux – Vulnerability in Chromium

The use of FileSystem after free in Google Chrome before version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Linux 5.10

In TBD of TBD, there is a possible way to corrupt kernel memory due to a use after free. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android. Versions: Android kernel. Android...

Astra Linux – Vulnerability in Chromium

The use of frames with free in Google Chrome before version 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in GhostScript

A vulnerability classified as problematic was discovered in GhostPCL 9.55.0. This vulnerability affects the chunkfreeobject function in the gsmchunk.c file. Manipulation with a malicious file can lead to memory corruption. The attack can be initiated remotely, but requires user interaction. The...

Astra Linux – Vulnerability in Linux 5.10, Linux

In bindervmaclose of binder.c, there is a potential exploit after the free function call due to improper locking. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for this exploitation. Product: Android...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 104.0.5112.79, using "use after free" in the Input component in Google Chrome on the Chrome OS allowed a remote attacker who convinced a user to perform certain user interactions to potentially exploit heap corruption through those interactions...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by an improper input validation vulnerability, which may lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a specially crafted file...