ROS-20260722-73-0019

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

DEBIAN-CVE-2026-16423

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-16421

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-16414

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

CVE-2026-63959

A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-61211

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMSCLOUD privilege with network access via Oracle Net to compromise RDBMS. While...

CVE-2026-61094

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high...

CVE-2026-60801

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60323

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-60177

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60150

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-47038

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise RDBMS...

CVE-2026-46923

Vulnerability in the Oracle Public Sector Financials International product of Oracle E-Business Suite component: Authorization. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-16421

CVE-2026-16421 relates to an Inappropriate implementation in WebAudio in Google Chrome (Chromium) before 150.0.7871.182 that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is part of a set of Chromium/WebAudio issues associated ...

CVE-2026-16421

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-41605

Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts...

CVE-2026-63926

A flaw was found in the Linux kernel's sockmap feature. When the bpfmsgpushdata function processes data, it incorrectly calculates the offset for data fragments, leading to an inconsistent memory arrangement. This issue could potentially allow a local attacker to cause data corruption or system...

CVE-2026-62466

CVE-2026-62466 affects Oracle E-Business Suite Human Resources (Data Removal Tool) with affected 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle Human Resources, potentially taking over the resource. The CVSS v3.1 base score is ...

CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...