CVE-2026-87152

Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...

EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-93135

Name of the Vulnerable Software and Affected Versions Google Chrome for Android versions prior to 153.0.8010.47 Description A missing authorization mechanism allows a local attacker to obtain sensitive information through a co-installed application. Recommendations Update Google Chrome for Androi...

CVE-2026-87152: Improper Access Control

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-92975

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-84626

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-84626

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream, if the library is used in versions outside the box with...

PT-2026-91248

Name of the Vulnerable Software and Affected Versions Zscaler client connector affected versions not specified Description A pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture. Recommendations At the moment, there is no information about a newer...

CVE-2026-87486

A clickjacking flaw was found in the TrustedWebActivities component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514017067...

CVE-2026-87552

A missing authorization flaw was found in the TrustedWebActivities component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547426657...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

DEBIAN-CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

EUVD-2026-74459

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

Google Chrome on Android versions prior to 153.0.8010.36 is vulnerable to a UI misrepresentation in CustomTabs . This flaw allows a remote attacker to spoof the address bar through a co-installed application. Remediation involves updating the software to a patched version, such as the one provide...