CVE-2026-40866

creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:25+00:00| seen| Telegram/zADwex3kLz9IaLHwxMwQfRAPY0yfg2SR1HrZ5uE72Qmc...

CVE-2026-35251

The CVE-2026-35251 entry concerns Oracle VM VirtualBox (Core) with affected version 7.2.6. The vulnerability is described as exploitable by a high-privilege attacker who has logon to the infrastructure where Oracle VM VirtualBox executes, with local attack requirements (attack vector LOCAL, compl...

CVE-2026-35252

...

CVE-2026-35249

...

CVE-2026-35248

...

CVE-2026-35247

...

CVE-2026-35249

CVE-2026-35249 affects Oracle VM VirtualBox 7.2.6 (Core component). The issue enables a high-privileged attacker with local access to compromise Oracle VM VirtualBox, with potential unauthorized update/insert/delete of data. The CVSS 3.1 base score is 3.2 (LOW); impact is limited to integrity (LO...

CVE-2026-35246

...

CVE-2026-35245

This CVE concerns Oracle VM VirtualBox (Oracle Virtualization, Core component) with affected version 7.2.6. The vulnerability is exploitable over a network via RDP by an unauthenticated attacker, potentially causing a hang or crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 base score is 7....

CVE-2026-35244

...

CVE-2026-35243

The CVE-2026-35243 affects Oracle Fusion Middleware's Oracle Application Development Framework (ADF), specifically ADF Faces. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is triggered within the ADF component and is described as allowing a low-privilege attacker who can log ...

CVE-2026-35241

...

CVE-2026-35241

...

CVE-2026-35239

CVE-2026-35239 affects Oracle MySQL Server (component: Server: DML) with vulnerable versions 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The issue allows a high-privilege attacker with network access (via multiple protocols) to cause a hang or frequently repeatable crash (complete DoS) of MySQL S...

CVE-2026-35238

The CVE-2026-35238 entry affects Oracle MySQL Server (InnoDB component). Affected versions are MySQL 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The flaw is exploitable by a highly privileged attacker who can access the service over multiple network protocols, potentially causing the MySQL Server...

CVE-2026-35235

...

CVE-2026-35231

Vulnerability in the Oracle Financial Services Transaction Filtering product (UI) affecting version 8.1.2.8.0 . An unauthenticated attacker with network access via HTTP can compromise the system, resulting in unauthorized access to data. CVSS 3.1 base score 7.5 (Confidentiality impact: High). Exp...

CVE-2026-35230

Vulnerability in Oracle VM VirtualBox (Core) affecting version 7.2.6. A local high-privilege attacker can compromise the VirtualBox instance, with potential scope changes affecting additional products. CVSS 3.1 base score 7.5 (HIGH) for confidentiality, integrity, and availability impacts. No exp...

CVE-2026-35229

CVE-2026-35229 concerns the Java VM component of Oracle Database Server, affecting 19.3–19.30 and 21.3–21.21. An unauthenticated attacker with network access via Oracle Net can compromise the Java VM, potentially gaining unauthorized access to data or full Java VM data. CVSS v3.1 base score is 7....

CVE-2026-34323

The CVE affects Oracle Life Sciences InForm (IDM Authentication) in Oracle Life Sciences Applications, with affected versions 7.0.1.0 and 7.0.1.1. It is exploitable over HTTP by an unauthenticated network attacker and requires user interaction for a successful attack. Impact includes unauthorized...