PT-2026-77376

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Deployment versions 17.0 through 26.6 Description A flaw in the Installation component of the Siebel CRM Deployment product allows a low-privileged attacker with access to the infrastructure where the software executes to...

PT-2026-77342

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.8 Description An issue exists in the Outside In Core component of Oracle Fusion Middleware. An unauthenticated attacker with access to the infrastructure where the software executes can compromise the...

PT-2026-78084

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-78098

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the Installer component of the Oracle Identity Manager product of Oracle Fusion Middleware allows a low privileged attacker with acce...

PT-2026-77512

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with access to the infrastructure where the...

PT-2026-78092

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security issue in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successf...

PT-2026-77833

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

PT-2026-78032

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue exists in the Gantt Chart component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with access to the infrastructure where the software executes can...

Linux Distros Unpatched Vulnerability : CVE-2026-72446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: qcom: reject stream disable with no active interface handleuaudiostreamreq resolves an interface index with infoidxfromifnum, which returns...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-9771

The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

CVE-2026-74503

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. An unprivileged local user with access to the /dev/snd/timer and /dev/snd/seq devices can exploit a race condition where a timer instance's SNDRVTIMERIFLGDEAD flag is not properly cleared after closing...

CVE-2026-74499

A flaw was found in the kernel's Advanced Linux Sound Architecture ALSA USB audio driver. An integer overflow vulnerability in the sndusbmidiakaioutput function, when processing data from a USB device with a small bulk-OUT endpoint, can lead to an out-of-bounds write in the kernel heap. A local...

CVE-2026-56686

Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-74801

SiYuan before 3.7.4 fails to escape workspace directory paths passed to the elevated elevator.exe helper. An attacker can create a directory containing command metacharacters, then trigger the Microsoft Defender exclusion flow to execute arbitrary commands as administrator after UAC approval. CVS...

CVE-2026-74801 SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion...

BIT-JAVA-2026-62574

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Install. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Orac...

BIT-JAVA-2026-60526

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...