CVE-2026-101622

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101621

A flaw was found in the InnoDB component of MySQL. A high-privileged remote attacker with network access could exploit this vulnerability to cause a Denial of Service DoS. Successful attacks can result in an unauthorized hang or repeatable crash of the database service...

CVE-2026-101619

A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete Denial of Service DoS...

CVE-2026-101618

A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service DoS. Successful exploitation allows the attacker to trigger a hang or repeatable server crash, rendering the database unavailable...

CVE-2026-101617

A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue leads to a complete Denial of Service DoS, rendering the database service...

CVE-2026-101616

A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the...

CVE-2026-101615

A flaw was found in the InnoDB component of MySQL. A local attacker with high privileges on the host infrastructure can exploit this vulnerability to cause the database service to hang or repeatedly crash, resulting in a denial of service DoS...

CVE-2026-101614

A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS, rendering the database service unavailable t...

CVE-2026-101613

A flaw was found in the Data Definition Language DDL component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. This flaw primarily results in a complete denial of...

CVE-2026-101612

A flaw was found in the MySQL InnoDB component. A local, highly privileged attacker with access to the underlying infrastructure, requiring interaction from another user, can exploit this vulnerability to cause a hang or repeatable crash. Successful exploitation results in a Denial of Service DoS...

CVE-2026-101611

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS, disrupting normal operations and rendering...

CVE-2026-101610

A flaw was found in MySQL's Server Optimizer component. A remote attacker with high administrative privileges can exploit this vulnerability across network protocols to trigger a complete Denial of Service DoS. Successful exploitation causes the database server to hang or repeatedly crash,...

CVE-2026-101609

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101608

A flaw was found in the MySQL Server Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. A successful attack allows the attacker to cause the database server to hang or repeatedly crash, leading to a...

CVE-2026-101607

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability through multiple protocols to cause the service to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS, maki...

CVE-2026-101797

A flaw was found in the mysqldump component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101785

A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitation can also result in a Denial of Service DoS by crashing ...

CVE-2026-101796

A flaw was found in the Replication component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101775

A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a Denial of Service DoS by causing the server to hang or...

CVE-2026-101773

A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to cause a Denial of Service DoS by hanging or repeatedly...

CVE-2026-101772

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101771

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101770

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101679

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101777

A flaw was found in the MySQL security encryption component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the service to hang or crash repeatedly, resulting in a complete Denial of Service DoS. Additionally, successful exploitation can allo...

CVE-2026-101756

A flaw was found in the Geographic Information System GIS component of MySQL. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause a Denial of Service DoS. Successful exploitation causes the database server to hang or crash repeatedly,...

CVE-2026-101755

A flaw was found in MySQL client programs. An authenticated attacker with network access and low privileges could exploit this vulnerability across multiple protocols. A successful attack allows the threat actor to cause an application hang or repeated crash, resulting in a complete Denial of...

CVE-2026-101753

A flaw was found in the RAPID component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denial of Service DoS of affected database services. Mitigation...

CVE-2026-101752

A flaw was found in the MySQL Server Components Services. A high-privileged remote attacker with network access can exploit this vulnerability under specific conditions to cause a Denial of Service DoS. Successful exploitation allows an attacker to cause the server to hang or crash repeatedly,...

CVE-2026-101743

A flaw was found in the MySQL Server Geographic Information System GIS component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or repeatedly crash. This issue results in a complete Denial of...

CVE-2026-101749

A flaw was found in MySQL. A remote attacker with high privileges and network access can exploit this vulnerability in the security encryption component to cause a Denial of Service DoS. Successful exploitation can lead to a complete hang or repeatable crash of the server, rendering database...

CVE-2026-101722

A flaw was found in the MySQL connection handling component. A remote attacker with low privileges and network access can exploit this vulnerability using multiple protocols. Successful exploitation results in unauthorized read access to a subset of database data, leading to information disclosur...

CVE-2026-114663

A flaw was found in Vyper. The compiler incorrectly resolves imported constants and default arguments within a function's local scope rather than at their original declaration. If a smart contract uses a local variable or parameter that shares a name with an imported identifier, an attacker...

CVE-2026-101513

A flaw was found in the InnoDB component of MySQL. An attacker with physical access and high privileges can exploit this vulnerability to cause the system to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the database cluster...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest ...

CVE-2026-98710

A flaw was found in the Linux kernel's iwlegacy wireless driver. The driver fails to release memory allocated for device configuration data when a wireless network device is removed from the system. A local user could exploit this vulnerability by repeatedly triggering device disconnection or...

CVE-2026-91477

A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to load and run untrusted code within a sandboxed client application. A successful attack allows unauthorized read access to a subset of accessible data, resulting in information...

CVE-2026-91402

A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to run untrusted code in a sandboxed client environment. Successful exploitation allows the attacker to obtain unauthorized read access to sensitive data, leading to information...

CVE-2026-114608

A flaw was found in Pylint. The application stores module statistics in predictable cache files and deserializes them without adequate validation. A local attacker with write access to a shared or untrusted cache directory can replace these files with malicious data. When Pylint is subsequently...

CVE-2026-115327

A flaw was found in libyang. An uninitialized pointer free vulnerability occurs during the processing of Network Configuration Protocol NETCONF Remote Procedure Call RPC action envelopes. An authenticated remote attacker with an established NETCONF session can trigger this flaw by sending a...

CVE-2026-114732

A flaw was found in Roundcube Webmail. In multi-host installations, user authentication using an alias address does not restrict account lookup to the specific Internet Message Access Protocol IMAP host. A remote authenticated user could exploit this flaw to gain unauthorized access to another...

CVE-2026-114603

A flaw was found in opentelemetry-api. An unauthenticated remote attacker can cause a Denial of Service DoS by sending an HTTP request with a malformed tracing header containing an excessively long sequence of whitespace characters. Because the header parsing logic uses an inefficient regular...

CVE-2026-115221

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...

CVE-2026-114570

A flaw was found in WordPress. Insufficient escaping of user display names in the Quick Edit feature allows an authenticated user with contributor-level privileges to conduct stored Cross-Site Scripting XSS attacks. By submitting malicious scripts, an attacker can cause them to execute within the...

CVE-2026-103502

A flaw was found in hexcore. A network attacker capable of intercepting network traffic can impersonate remote package repositories and Application Programming Interface API servers due to improper certificate validation in the default HTTP adapter. When certificate verification cannot be complet...

CVE-2026-101620

A flaw was found in the MySQL Server Optimizer component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denial of Service DoS of the database...

CVE-2026-79608

A flaw was found in Xen. Due to an inverted conditional check in the handling of processor configuration registers, the software mitigation for the Zenbleed hardware vulnerability is not applied when required. A malicious guest user can exploit this lack of protection to access sensitive data...

CVE-2026-78660

A flaw was found in Go's net/http package. When operating as a reverse proxy, the HTTP/2 implementation does not properly validate framing-related headers in responses received from upstream servers before forwarding them to downstream HTTP/1 clients. A malicious upstream server can exploit this...

CVE-2026-79611

A flaw was found in Xen. A user inside a guest virtual machine can cause a Denial of Service DoS of that guest by enabling a specific combination of processor debugging and branch tracing states. Due to improper state handling during hardware virtualization transitions, the hypervisor triggers a...

CVE-2026-79609

A flaw was found in Xen. A malicious paravirtualized PV guest can cause a denial of service DoS by crashing the host hypervisor. During Xen Page Table Isolation XPTI processing, Xen attempts to access guest root page tables located in memory beyond the direct memory mapping boundary. Attempting t...