CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 13:23 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101809 | WO Workflow Oracle Corporation | 10.0 | Oct 20 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer) |
| CVE-2026-101808 | OP Oracle Product Workbench Oracle Corporation | 9.1 | Oct 20 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI) |
| CVE-2026-101767 | OA Oracle Application Object Library Oracle Corporation | 9.8 | Oct 20 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core) |
| CVE-2026-101765 | OC Oracle Communications Billing and Revenue Management Oracle Corporation | 9.1 | Oct 20 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server) |
| CVE-2026-101763 | OC Oracle Communications BRM - Elastic Charging Engine Oracle Corporation | 9.8 | Oct 20 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment) |
| CVE-2026-101634 | OM Oracle Mobile Field Service Oracle Corporation | 9.1 | Oct 20 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) |
| CVE-2026-101590 | HE Helidon Oracle Corporation | 9.1 | Oct 20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security) |
| CVE-2026-101537 | OS Oracle Solaris Oracle Corporation | 9.8 | Oct 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility) |
| CVE-2026-101529 | OE Oracle Enterprise Manager for Oracle Database Oracle Corporation | 9.9 | Oct 20 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management) |
| CVE-2026-101528 | OE Oracle Enterprise Manager for Oracle Database Oracle Corporation | 9.9 | Oct 20 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management) |
| CVE-2026-101521 | OA Oracle APEX Oracle Corporation | 9.8 | Oct 20 | Vulnerability in Oracle APEX (component: General) |
| CVE-2026-101503 | OT Oracle Trusted Answer Search Oracle Corporation | 9.9 | Oct 20 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) |
| CVE-2026-101501 | OT Oracle Trusted Answer Search Oracle Corporation | 9.9 | Oct 20 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) |
| CVE-2026-101499 | OW Oracle WebCenter Sites Oracle Corporation | 9.8 | Oct 20 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) |
| CVE-2026-101484 | OS Oracle Secure Backup Oracle Corporation | 9.8 | Oct 20 | Vulnerability in Oracle Secure Backup (component: Backup and Restore) |
| CVE-2026-101446 | SC Siebel CRM Cloud Applications Oracle Corporation | 9.9 | Oct 20 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager) |
| CVE-2026-101420 | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 9.6 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) |
| CVE-2026-113169 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113116 | CH Chrome Google | 9.6 | Oct 20 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113186 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113023 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113300 | CH Chrome Google | 9.6 | Oct 20 | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113056 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113089 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113235 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113342 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113138 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113270 | CH Chrome Google | 9.6 | Oct 20 | Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113007 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113126 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113084 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113328 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113171 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-113261 | CH Chrome Google | 9.6 | Oct 20 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-112992 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113189 | CH Chrome Google | 9.6 | Oct 20 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113014 | CH Chrome Google | 9.6 | Oct 20 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113283 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
| CVE-2026-113078 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-113211 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113263 | CH Chrome Google | 9.6 | Oct 20 | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113336 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113222 | CH Chrome Google | 9.6 | Oct 20 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113020 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-113252 | CH Chrome Google | 9.6 | Oct 20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-113072 | CH Chrome Google | 9.6 | Oct 20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-112712 | FA @fastify/middie @fastify/middie | 9.1 | Oct 20 | @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch |
| CVE-2026-35499 | TO Totolink totolink | 9.1 | Oct 20 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-40627 | TO Totolink totolink | 9.1 | Oct 20 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-28763 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |