Search: 16.5-2

CVE-2026-101609 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. The advisory emphasizes the importance of applying available patches promptly to mitigate exploitation risks.

CVE-2026-101608 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101607 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-101599 is a high severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 score of 7.5, indicating a significant risk. The vulnerability requires local attack vector with high attack complexity, low privileges, and user interaction, but can impact confidentiality, integrity, and availability with a scope change. Multiple versions of VirtualBox 5.0.x are affected. No public exploits or patches are currently documented in the provided data.

CVE-2026-101598 is a high-severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and no user interaction. It affects multiple specific versions of VirtualBox, primarily in the 5.0.x series. There is no information about public exploits or vendor patches in the provided data.

CVE-2026-101516 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed in various Ubuntu releases. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, leading to limited confidentiality and integrity impacts without affecting availability.

A segmentation violation vulnerability exists in the gf_props_equal_internal function of the gpac software. This flaw can cause a crash or denial of service when the function is triggered. The vulnerability has a medium severity rating with a CVSS score of 5.5 and requires local access with user interaction to exploit.

A buffer overflow vulnerability exists in the gf_ac4_parser_bs function of the gpac media processing tool. This flaw can cause a denial of service by crashing the application. The vulnerability affects multiple specific versions of gpac. The CVSS score is 5.5, indicating medium severity with local attack vector and no confidentiality or integrity impact.

A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N).

CVE-2026-87311 is a vulnerability in Oracle VM VirtualBox version 7.2.16 that allows a low privileged attacker with logon access to cause a denial of service (DoS) by triggering a hang or repeated crash. The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. The vulnerability has a CVSS 3.1 base score of 5.6 and affects only version 7.2.16 of Oracle VM VirtualBox.

CVE-2026-87303 is a vulnerability in Oracle VM VirtualBox version 7.2.16 that allows a low privileged attacker with logon access to cause a denial of service. Exploitation requires user interaction from someone other than the attacker. Successful exploitation can cause Oracle VM VirtualBox to hang or crash repeatedly, impacting availability. The vulnerability has a CVSS 3.1 base score of 5.9, indicating a medium severity level.

CVE-2026-87301 is a vulnerability in Oracle VM VirtualBox version 7.2.16 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. Successful exploitation can lead to unauthorized access to critical data and cause denial of service by crashing Oracle VM VirtualBox. The vulnerability has a high severity with a CVSS 3.1 base score of 8.4, impacting confidentiality and availability.

CVE-2026-101735 is a vulnerability in Oracle Primavera Unifier (Project Control component) versions 23.12.0 through 23.12.16. It allows a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, as well as unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with confidentiality and integrity impacts.

CVE-2026-101500 is a vulnerability in Oracle Global Lifecycle Management OPatchAuto affecting versions 12.2.0.1.16 through 12.2.0.1.52. It allows a high privileged attacker with logon access to the infrastructure to compromise the OPatchAuto component. Exploitation requires user interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 6.5.

Python virtualenv versions including 1.10.1-1 through 15.1.0+ds-2build1 contain a high severity vulnerability (CVE-2026-113725) with a CVSS score of 7.8. This vulnerability affects the confidentiality, integrity, and availability of the system and requires local attack vector with low complexity and no privileges but user interaction. No public exploit or vendor patch information is provided.

A medium severity vulnerability (CVE-2026-113724) affects multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact with low privileges required and no user interaction needed. It impacts confidentiality, integrity, and availability to a low degree. No public exploits or patches are currently documented.

A high-severity vulnerability (CVE-2026-113722) affects multiple specific versions of the python-virtualenv tool, which is used for creating isolated Python environments. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The affected versions include various releases from 1.10.1-1 through 15.1.0+ds-2build1. No public exploit code or known exploitation in the wild has been reported. No patch or remediation information is provided in the available data.

A medium severity vulnerability (CVE-2026-113721) affects multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 score of 4.5, indicating limited impact with low privileges required and no user interaction needed. The affected versions include various Debian and Ubuntu package builds. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.