Publikacje w kolejności czasu

Wszystkie technologie
CVSS — dotkliwość podatności w skali 0–10. Wyższy wynik oznacza poważniejsze skutki. Nie określa prawdopodobieństwa ataku.EPSS — szacowane prawdopodobieństwo wykorzystania podatności w atakach w ciągu najbliższych 30 dni. Wynik jest podany w procentach.CISA KEV — katalog podatności o potwierdzonym wykorzystaniu w atakach. Brak wpisu nie oznacza braku ataków.
Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
OprogramowaniePodatność i krótki opisZapisz
Chrome CVE-2026-113016
Wysoki priorytetPoC

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,28 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-113020
Wysoki priorytet

Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,5 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-113007
Wysoki priorytet

Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

9,6 0,35 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-113009
Wysoki priorytetPoC

UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,33 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-112995
Wysoki priorytetPoC

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,33 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-112992
Wysoki priorytet

Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

9,6 0,35 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-112994
Wysoki priorytetPoC

UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

8,8 0,33 % Brak wpisu w KEV nie wyklucza ataków
Oracle Product Workbench CVE-2026-101808
Wysoki priorytet

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Workbench.…

9,1 0,4 % Brak wpisu w KEV nie wyklucza ataków
Workflow CVE-2026-101809
Wysoki priorytet

Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Workflow. While the…

10,0 0,57 % Brak wpisu w KEV nie wyklucza ataków
Oracle Application Object Library CVE-2026-101767
Wysoki priorytet

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application…

9,8 0,61 % Brak wpisu w KEV nie wyklucza ataków
Oracle Communications BRM - Elastic Charging Engine CVE-2026-101763
Wysoki priorytet

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated…

9,8 0,53 % Brak wpisu w KEV nie wyklucza ataków
Oracle Communications Billing and Revenue Management CVE-2026-101765
Wysoki priorytet

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

9,1 0,44 % Brak wpisu w KEV nie wyklucza ataków
Oracle Mobile Field Service CVE-2026-101634
Wysoki priorytet

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile…

9,1 0,56 % Brak wpisu w KEV nie wyklucza ataków
Helidon CVE-2026-101590
Wysoki priorytet

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful…

9,1 0,42 % Brak wpisu w KEV nie wyklucza ataków
Oracle Solaris CVE-2026-101537
Wysoki priorytet

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability…

9,8 0,45 % Brak wpisu w KEV nie wyklucza ataków
Oracle Enterprise Manager for Oracle Database CVE-2026-101528
Wysoki priorytet

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

9,9 0,42 % Brak wpisu w KEV nie wyklucza ataków
Oracle Enterprise Manager for Oracle Database CVE-2026-101529
Wysoki priorytet

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

9,9 0,42 % Brak wpisu w KEV nie wyklucza ataków
Oracle APEX CVE-2026-101521
Wysoki priorytet

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle APEX. Successful attacks of this…

9,8 0,58 % Brak wpisu w KEV nie wyklucza ataków
Oracle WebCenter Sites CVE-2026-101499
Wysoki priorytet

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

9,8 0,57 % Brak wpisu w KEV nie wyklucza ataków
Oracle Trusted Answer Search CVE-2026-101501
Wysoki priorytet

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in…

9,9 0,41 % Brak wpisu w KEV nie wyklucza ataków
Oracle Trusted Answer Search CVE-2026-101503
Wysoki priorytet

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in…

9,9 0,42 % Brak wpisu w KEV nie wyklucza ataków
Oracle Secure Backup CVE-2026-101484
Wysoki priorytet

Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this…

9,8 0,54 % Brak wpisu w KEV nie wyklucza ataków
Siebel CRM Cloud Applications CVE-2026-101446
Wysoki priorytet

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud…

9,9 0,4 % Brak wpisu w KEV nie wyklucza ataków
PeopleSoft Enterprise PeopleTools CVE-2026-101420
Wysoki priorytet

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.…

9,6 0,38 % Brak wpisu w KEV nie wyklucza ataków
Totolink CVE-2026-9827
Wysoki priorytet

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…

9,1 0,63 % Brak wpisu w KEV nie wyklucza ataków
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.