PT-2026-3682

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1 Oracle GraalVM for JDK versions 17.0.17 and 21.0.9 Oracle GraalVM Enterprise Edition version 21.3.16 Description An easily exploitable issue exists in Oracl...

PT-2026-3689

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.0 Description A difficult-to-exploit issue exists within the SQLcl component that allows an unauthenticated attacker, with access to the infrastructure where SQLcl runs, to compromise SQLcl...

PT-2026-3724

Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance component: Security. Supported versions that are affected are 23.1.0-23.1.202509. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2025-65117

The vulnerability, if exploited, could allow an authenticated miscreant Process Optimization Designer User to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements...

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48647

In cpmfwtpmsghandler of cpm/google/lib/tracepoint/cpmfwtpipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...

EUVD-2025-206292

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001602 advisory. In driveroverridestore of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004040 advisory. In em28xxunregisterdvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001405 advisory. In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001440 advisory. In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...

PT-2026-3272

In cpm fwtp msg handler of cpm/google/lib/tracepoint/cpm fwtp ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004392 advisory. In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with syste...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004083 advisory. In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003896 advisory. In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004117 advisory. In bindertransaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004112 advisory. In tungetuser of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege...