CVE-2026-101599

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-87322

The Oracle VM VirtualBox product (component: Core ) is affected by a vulnerability in version 7.2.20 . A high-privileged attacker with access to the physical communication segment attached to the host hardware can exploit this to compromise and potentially achieve a takeover of Oracle VM VirtualB...

CVE-2026-87322

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the Oracl...

CVE-2026-87311

A vulnerability exists in the Core component of Oracle VM VirtualBox (specifically affecting version 7.2.16 ). A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the software. Successful exploitation can lead to a complete De...

CVE-2026-87303

A vulnerability exists in the Core component of Oracle VM VirtualBox version 7.2.16 . This easily exploitable flaw allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the product. Successful exploitation requires human interaction from a pe...

CVE-2026-87301

A vulnerability exists in the Core component of Oracle VM VirtualBox version 7.2.16 . A low-privileged attacker with local access to the infrastructure can easily exploit this flaw to compromise the software, potentially leading to unauthorized access to critical data or a complete Denial of Serv...

CVE-2026-87301

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-101599

A vulnerability exists in the Core component of Oracle VM VirtualBox affecting version 7.2.20 . This high-complexity vulnerability allows a low-privileged attacker with local access to the infrastructure to compromise the software, potentially leading to a takeover of Oracle VM VirtualBox. Succes...

CVE-2026-101598

A vulnerability exists in the Core component of Oracle VM VirtualBox (version 7.2.20). A low-privileged attacker with access to the infrastructure where the software executes can exploit this flaw to compromise the product, potentially resulting in a takeover of Oracle VM VirtualBox. This vulnera...

PT-2026-119279

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-98469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Fix AArch32 DBGBXVR handling The consolidation of the breakpoint and watchpoint register accessors switched DBGBXVR from trapbvr to trapdbgwbreg. Th...

CVE-2026-91615: Oracle Database: Critical Patch Update - October 2026

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having None privilege with network access via SOCKS5 to compromise Java VM. While...

Linux Distros Unpatched Vulnerability : CVE-2026-98472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Free haveruncpus during VM destruction even if VM is no longer SEV Unconditionally free SEV's have run CPUs cpumask in the VM destroy path, i.e. even...

PT-2026-119641

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the Oracl...

PT-2026-119278

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119620

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

UBUNTU-CVE-2026-98510

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after unlinking contested VMAs In xevmcloseandput, external-BO VMAs are queued on the contested list for deferred destruction via xevmadestroyunlocked. However, xevmptdestroy was previously invoked before...

CVE-2026-98510

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after unlinking contested VMAs In xevmcloseandput, external-BO VMAs are queued on the contested list for deferred destruction via xevmadestroyunlocked. However, xevmptdestroy was previously invoked before...

Linux Distros Unpatched Vulnerability : CVE-2026-98510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: nuke PTs only after unlinking contested VMAs In xevmcloseandput, external-BO VMAs are queued on the contested list for deferred destruction via...