Search: 10.4-5

CVE-2026-91411 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No public exploits or known active exploitation have been reported.

CVE-2026-91409 is a low-severity vulnerability in the networking component of Oracle Java SE, specifically affecting OpenJDK version 27+35-1. The vulnerability does not impact confidentiality, integrity, but may cause a limited availability impact. No known exploits are reported in the wild.

CVE-2026-91396 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. It impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw that requires no privileges or user interaction but results in integrity and availability impacts. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.

CVE-2026-91395 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability does not impact confidentiality but allows for integrity and availability impacts without requiring privileges or user interaction. It has a CVSS 3.1 base score of 6.5.

CVE-2026-91394 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu distributions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK products. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the available data.

CVE-2026-91385 is a medium severity vulnerability affecting multiple versions of OpenJFX, including versions bundled with Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network exploitable flaw that requires no privileges but user interaction. The impact includes limited confidentiality and integrity loss without availability impact. No public exploits or patches are currently documented.

CVE-2026-91382 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu releases. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The vulnerability does not affect confidentiality but impacts integrity and availability.

CVE-2026-91375 is a medium severity vulnerability in Oracle Java SE libraries affecting multiple OpenJDK 8 versions. The vulnerability has an impact on integrity but does not affect confidentiality or availability. It requires local attack vector with high attack complexity and no privileges, and user interaction is required for exploitation.

CVE-2026-91335 is a low severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The flaw has a CVSS score of 2.6, indicating limited impact, primarily involving low confidentiality impact and requiring high attack complexity and user interaction. No known exploits are reported in the wild.

CVE-2026-91332 is a medium severity vulnerability in the Networking component of Oracle Java SE, specifically affecting OpenJDK 8 builds. It has a CVSS 3.1 base score of 5.3 with no confidentiality or availability impact but with a low integrity impact. The vulnerability does not require privileges or user interaction to be exploited. No known exploits are reported in the wild. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.

CVE-2026-87322 is a high-severity vulnerability in Oracle VM VirtualBox affecting multiple 5.0.x dfsg versions. It has a CVSS v3.1 score of 8.4, indicating a significant risk with high impact on confidentiality, integrity, and availability. The vulnerability requires high privileges and no user interaction but can be exploited remotely over an adjacent network. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

CVE-2026-87294 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, causing limited confidentiality and integrity impacts but no availability impact. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.

A medium severity vulnerability (CVE-2026-87293) exists in Oracle Java SE's RMI component affecting multiple OpenJDK 8 versions. The flaw allows remote attackers to cause partial confidentiality and integrity loss without authentication. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with high attack complexity and no privileges required. No public exploits or known active exploitation have been reported. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.

CVE-2026-87290 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.04 LTS. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported.

A low severity vulnerability (CVE-2026-87255) exists in the Oracle Java SE Compiler component affecting multiple OpenJDK 8 versions. The flaw has a CVSS score of 3.7 with low impact on confidentiality and no impact on integrity or availability. No known exploits are reported in the wild. The vulnerability affects specific OpenJDK 8 update builds primarily on Ubuntu platforms.

CVE-2026-113776 is a high-severity vulnerability affecting multiple specific versions of the python-virtualenv package. Virtualenv is a tool used to create isolated Python environments. The vulnerability has a CVSS 3.1 score of 7.8, indicating high impact on confidentiality, integrity, and availability. The affected versions include various Debian/Ubuntu package builds from versions 1.10.1-1 through 15.1.0+ds-2build1. No public exploit or vendor patch information is provided in the data.

CVE-2026-113732 is a high-severity vulnerability in python-virtualenv, a tool used to create isolated Python environments. The vulnerability affects multiple specific versions of python-virtualenv, including versions from 1.10.1-1 through 15.1.0+ds-2build1. The CVSS 3.1 score is 7.8, indicating high impact with high confidentiality, integrity, and availability impact. The vulnerability requires local access with low attack complexity but involves user interaction. No public exploits or known active exploitation are reported. No patch or remediation information is provided in the source data.

CVE-2026-113730 is a medium severity vulnerability in the OGNL (Object Graph Navigation Library) for Java affecting specific versions 2.7.3-5 through 2.7.3-9. The vulnerability has a CVSS score of 5.6, indicating a network attack vector with high attack complexity and no privileges or user interaction required, impacting confidentiality, integrity, and availability to a low extent. No public exploit or known active exploitation is reported. The affected versions are explicitly identified, but no patch or remediation details are provided in the available data.

CVE-2026-113341 is a medium severity vulnerability in libskia version 146.20260311+dfsg-4ubuntu1. It allows an attacker to cause a confidentiality impact without affecting integrity or availability. The vulnerability requires network access and user interaction to exploit.

A high-severity vulnerability (CVE-2026-113106) affecting libskia version 146.20260311+dfsg-4ubuntu1 has been published. The vulnerability has a CVSS 3.1 score of 8.8, indicating it is remotely exploitable with low attack complexity and no privileges required, but requires user interaction. It impacts confidentiality, integrity, and availability. No public exploits or known active exploitation have been reported.