CVE-2026-16420

CVE-2026-16420 is a Type Confusion in WebAudio affecting Google Chrome prior to 150.0.7871.182 (Chromium). The flaw, exploitable via a crafted HTML page, allows remote code execution inside the sandbox. Affected product: Google Chrome (older than 150.0.7871.182). Remediation: upgrade to Chrome 15...

CVE-2026-16485

SourceCodester Class and Exam Timetabling System 1.0 suffers a cross-site scripting (XSS) vulnerability in /class.php via manipulation of the day parameter. The issue can be exploited remotely and the exploit has been disclosed publicly. No additional technical details (such as exact payloads, af...

CVE-2026-56816

Netty HTTP/3 vulnerability (CVE-2026-56816): The Http3FrameCodec buffers incoming reserved HTTP/3 frame types up to the wire payload length and trusts payLoadLength, enabling an attacker to open many QUIC streams and send frames with oversized payloads, causing memory exhaustion and denial of ser...

CVE-2026-58429

Technical details for CVE-2026-58429 are not publicly available in the provided documents. Monitor for future updates.

CVE-2026-59765

Technical details for CVE-2026-59765 are not publicly available in the provided documents. The entry remains reserved with no disclosed affected products, impact, or remediation. Monitor for updates from the submitting organization.

CVE-2026-58511

Technical details for CVE-2026-58511 are not publicly available in the provided documents. Monitor for updates; no product, impact, or remediation information is available from these sources.

CVE-2026-57897

Technical details for CVE-2026-57897 are not publicly available in the provided documents. Monitor for updates from official disclosures; no affected products, vectors, or remediation are specified.

CVE-2026-58510

Technical details for CVE-2026-58510 are not publicly available in the provided documents. Monitor for updates from the issuing authority and future disclosures.

CVE-2026-65319

Feedbin contains an unauthenticated information disclosure via the GET /api/v2/entries/:id/text endpoint. The vulnerability arises because the authorization check is bypassed (before-action filter skipped), enabling an attacker to enumerate private article content by iterating sequential entry ID...

CVE-2026-62574

CVE-2026-62574 affects Oracle Java SE and GraalVM variants. Affected: Oracle Java SE 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. Vulnerability described as easily exploitable with a low-privileged, local ...

CVE-2026-62565

CVE-2026-62565 affects Oracle HRMS (US) within Oracle E-Business Suite, US Payroll Year End, for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized access to confidential data and unauthorized up...

CVE-2026-62563

CVE-2026-62563 affects Oracle Work in Process (Oracle E-Business Suite) component Internal Operations, across 12.2.5–12.2.15. It allows a low-privileged, network-accessible attacker (HTTP) with required human interaction to compromise data via unauthorized update/insert/delete and read of Oracle ...

CVE-2026-62567

Oracle HRMS (UK) in Oracle E-Business Suite (UK Payroll) is affected on versions 12.2.3–12.2.15. The issue is exploitable with network access via HTTP by a low-privileged user, potentially leading to unauthorized access to critical data across Oracle HRMS (UK) and potentially other products (scop...

CVE-2026-62561

Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...

CVE-2026-62562

The CVE-2026-62562 entry concerns Oracle E-Business Suite HRMS (US), Internal Operations. Affected products/versions are Oracle E-Business Suite 12.2.3–12.2.15. The flaw is exploitable by a low-privileged attacker with network access via HTTP, enabling unauthorized access to Oracle HRMS (US) data...

CVE-2026-62560

The CVE-2026-62560 affects Oracle HRMS (Norway) within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially granting unauthorized access to all Oracle HRMS (Norway) d...

CVE-2026-62557

CVE-2026-62557 affects Oracle E-Business Suite – Oracle HRMS (UK) with UK Payroll component, vulnerable in supported versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access over HTTP to compromise HRMS (UK), potentially leading to unauthorized access to confidential ...

CVE-2026-62559

The CVE-2026-62559 entry concerns Oracle E-Business Suite's Oracle HRMS (US) with affected versions 12.2.3–12.2.15 in the Internal Operations component. The issue is exploitable over a network via HTTP and requires HIGH privileges, with no user interaction, and a changed scope. Successful exploit...

CVE-2026-62556

The CVE-2026-62556 affects Oracle HRMS (US) within Oracle E-Business Suite, specifically the Internal Operations component, for versions 12.2.6–12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP with network access, potentially granting unauthorized access to Oracl...

CVE-2026-62549

CVE-2026-62549 is a vulnerability in the Oracle HRMS (UK) component of Oracle E-Business Suite, affecting versions 12.2.3–12.2.15. The flaw allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle HRMS (UK), potentially leading to unauthorized creation, deletion, or mo...