Search: 5.1.8.7

CVE-2026-101618 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this vulnerability.

CVE-2026-101617 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the provided patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101616 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many products.

CVE-2026-101615 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released in Oracle's October 2026 Critical Patch Update. No specific technical details or exploitation methods are provided. Oracle strongly recommends applying available patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101614 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101613 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to Data Definition Language (DDL) operations. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101612 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) across multiple versions including MySQL 8.0, 8.4, and 9.7. The vulnerability is recognized and addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches for Oracle products. The advisory emphasizes the importance of applying these patches promptly to mitigate exploitation risks. There is no public exploit code or confirmed exploitation in the wild reported for this vulnerability.

CVE-2026-101611 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) products, including versions 8.0, 8.4, and 9.7. The vulnerability is publicly known and has been addressed by Oracle in their October 2026 Critical Patch Update, which includes numerous security patches across multiple Oracle products. There is no public exploit code or reports of exploitation in the wild for this vulnerability. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-101610 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which provides security patches for affected products.

CVE-2026-101609 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. The advisory emphasizes the importance of applying available patches promptly to mitigate exploitation risks.

CVE-2026-101608 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101607 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-101599 is a high severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 score of 7.5, indicating a significant risk. The vulnerability requires local attack vector with high attack complexity, low privileges, and user interaction, but can impact confidentiality, integrity, and availability with a scope change. Multiple versions of VirtualBox 5.0.x are affected. No public exploits or patches are currently documented in the provided data.

CVE-2026-101598 is a high-severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and no user interaction. It affects multiple specific versions of VirtualBox, primarily in the 5.0.x series. There is no information about public exploits or vendor patches in the provided data.

A buffer overflow vulnerability exists in the gf_ac4_parser_bs function of the gpac media processing tool. This flaw can cause a denial of service by crashing the application. The vulnerability affects multiple specific versions of gpac. The CVSS score is 5.5, indicating medium severity with local attack vector and no confidentiality or integrity impact.

Thunderbird's chat feature with XMPP accounts had a vulnerability where attribute values were not escaped when serializing outgoing XMPP stanzas. This allowed a remote XMPP user to send crafted requests that caused Thunderbird to inject arbitrary stanzas into the user's connection, which the server would process as if sent by the user. This could enable sending messages or changing contact and subscription settings without user interaction. The issue was fixed in Thunderbird versions 158.0.1 and 153.5.1.

CVE-2026-91664 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the application. The vulnerability impacts availability but does not affect confidentiality or integrity. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. However, no explicit patch version or fix details for this specific vulnerability are provided in the advisory content.

CVE-2026-91614 is a vulnerability in Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. It allows a low privileged attacker with logon access to the infrastructure to gain unauthorized read access to some data within the product. The vulnerability has a CVSS 3.1 base score of 3.3, indicating a low severity impact focused on confidentiality. There is no indication of impact on integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains multiple patches across products. However, no specific patch link for this vulnerability was provided in the input data.

CVE-2026-91613 is a vulnerability in Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. It allows a low privileged attacker with logon access to the infrastructure to gain unauthorized read access to some data within the product. The vulnerability has a CVSS 3.1 base score of 3.3, indicating a low severity impact focused on confidentiality. No integrity or availability impacts are reported. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across many products, but no specific patch link for this vulnerability was provided in the input data.

CVE-2026-91612 is a vulnerability in Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. It allows a low privileged attacker with logon access to the infrastructure to gain unauthorized read access to some data within the product. The vulnerability has a CVSS 3.1 base score of 3.3, indicating a low severity impact focused on confidentiality. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches for multiple products. However, no explicit patch link or fixed version is provided in the data.