/
vendors:eMudhra × criticity:high × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · · 3 fontes · 3 atualizações high

Oracle October 2026 CPU: 1,295 patches for 1,209 CVEs, with unauthenticated CVSS 9.8–9.9 flaws in Database, APEX and Essbase

Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It delivers 1,295 security patches for 1,209 unique CVEs across 33 product families (tenable.com, securityweek.com). The patch count is higher than the CVE count because one CVE can appear in several product matrices (gbhackers.co…

CVE-2026-75803 CVE-2026-101521 CVE-2026-66010
aikido.dev · · 3 fontes · 3 atualizações high

Node.js corrige falha de escrita fora dos limites no decodificador Brotli (CVE-2026-111497, "Node2Shell"), com PoC público; Bun também afetado

The Node.js Project released security updates on October 21, 2026 for the 26.x, 24.x and 22.x lines (26.12.1, 24.22.1, 22.23.4), fixing 10 vulnerabilities: four high, three medium and three low (gbhackers.com). The most serious is CVE-2026-111497, nicknamed Node2Shell (aikido.dev), an out-of-bounds write in the bundled Brotli decoder that…

CVE-2026-111497 CVE-2026-105482 CVE-2026-105483