PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,515 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates · Some delayed

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  8. NVD

    CVE-2026-112997 — Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary…

    High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    CVE-2026-112997
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-112995 — Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi…

    High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    CVE-2026-112995
    Read original (opens in a new tab)
  13. NVD

    CVE-2026-112992 — Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra…

    Critical · CVSS 3.1 9.6 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    CVE-2026-112992
    Read original (opens in a new tab)
  14. NVD

    CVE-2026-111879 — DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the…

    CVSS unscored / not supplied

    DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock file and takes an exclusive flock on it for a CREATE, before the checks that can croak: a dbm_mldbm value that is not a module name, a failing tie, or a missing data file. The croak unwinds before the table object is blessed, so nothing releases the lock, and the meta data holding the open descriptor stays cached on the database handle. The dbm…

    CVE-2026-111879
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-108518 — DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profi…

    CVSS unscored / not supplied

    DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names a database handle attribute, which dbi_profile reads from the handle's inner hash. It expects the inner handle as a reference and dereferences it, but a handle that is being destroyed hands back the inner hash itself, so the dereference yields the hash's bucket array. A type check on that pointer usually fails and the call goes unprofile…

    CVE-2026-108518
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-101857 — Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Suppo…

    Medium · CVSS 3.1 6.5 · Assessor: [email protected]

    Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). C…

    CVE-2026-101857
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-101856 — Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Suppo…

    Medium · CVSS 3.1 6.5 · Assessor: [email protected]

    Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). C…

    CVE-2026-101856
    Read original (opens in a new tab)
  18. NVD

    CVE-2026-101855 — Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi…

    Medium · CVSS 3.1 6.5 · Assessor: [email protected]

    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.…

    CVE-2026-101855
    Read original (opens in a new tab)
  19. NVD

    CVE-2026-101854 — Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

    CVE-2026-101854
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-101853 — Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

    CVE-2026-101853
    Read original (opens in a new tab)
  21. NVD

    CVE-2026-101852 — Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versi…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

    CVE-2026-101852
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-101851 — Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions tha…

    High · CVSS 3.1 7.1 · Assessor: [email protected]

    Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Installed Base accessible data as well as unauthorized update, insert or delete access to some of Installed Base access…

    CVE-2026-101851
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-101850 — Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are aff…

    Medium · CVSS 3.1 6.1 · Assessor: [email protected]

    Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability ca…

    CVE-2026-101850
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-101849 — Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions…

    High · CVSS 3.1 7.6 · Assessor: [email protected]

    Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Installed Base, attacks may significantly impact additional products (scope change). Successful attacks of this vuln…

    CVE-2026-101849
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-101847 — Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported…

    High · CVSS 3.1 7.5 · Assessor: [email protected]

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI…

    CVE-2026-101847
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.