PULSE
EN
FEED
ransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomwhitearmor reclama a KTU Shipyard · PH · Transportation
← Todos los CVEs
CVE Watch24 oct 2026

CVE-2026-60526

Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf.

CVSS

6.7

Medio

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 21 jul 2026 · Última mod.: 24 oct 2026 · CWE-20

EPSS · 30d
0.1%EPSS · 30 días0.1%
2026-10-022026-10-29
Descripción técnica

Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-633398.8 ALT
—
———IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is fixed in version 7.3.0.7hCVE-2026-629587.9 ALT
—
———libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. `Memory<W>::binary_loader` checks `PT_LOAD` program-header bounds, but `Memory<W>::serialize_execute_segment` trusts section-header `sh_offset` and `sh_size` when locating `.text` without verifying the file range against `m_binary.size()`; `Memory<W>::lookup()` has a similar section-table problem. Malformed `.text` or `.symtab` offsets can therefore bypass the program-header checks and point outside the binary buffer, crashing rvlinux. With suitable memory layout or integer overflow, out-of-buffer host heap memory may instead be mapped into the guest by `create_execute_segment()`, potentially exposing host memory. The reported reproducer demonstrates a host SIGSEGV, while memory disclosure through grooming is described as possible rather than demonstrated. This issue is fixed in version 1.18.9hCVE-2026-1193425.3 MED
—
———Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses SvgSanitizer.isExternalUrl() before Batik resolves it against the file:///input.svg document base as a same-origin local file. The convert() and addSvgAsPage() paths in app/core/src/main/java/stirling/software/SPDF/utils/SvgToPdf.java can then render image-decodable server files into the returned PDF when sanitization is enabled, including without authentication on login-disabled deployments or with non-admin access when login is enabled. The issue discloses PNG, JPG, GIF, or SVG content and provides an existence oracle only for image-decodable paths; plain text, binary files, directories, XInclude text, external entities, explicit file URLs, and tested HTTP references are not disclosed through this mechanism. This issue is fixed in version 2.13.2.9hCVE-2026-1193395.5 MED
—
———Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST_FLOAT builds, DeSerializeOld invokes ASSERT_HOST instead of returning an error, so loading a crafted model through TessBaseAPI::Init terminates the process and causes denial of service. This issue is fixed in version 5.5.4.7hCVE-2026-62337—
—
———SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. `EcPointLoader::multi_scalar_multiplication` places a `Value::Assigned(_)` base paired with `Value::Constant(ONE)` into its unscaled variable-base list and passes it directly to `sum_with_const`. The default shim delegates to halo2-lib `EccChip::sum`, whose incomplete affine addition assumes nonidentity input points. A prover-controlled proof point encoded as `(0, 0)` can therefore enter the final aggregation sum through the scalar-one shortcut and affect the MSM or accumulator computation. Practical exploitability depends on the surrounding aggregation and final-decider checks; the advisory does not establish universal acceptance of invalid proofs. This issue is fixed in version 0.2.5.10hCVE-2026-62335—
—
———OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` accepts `appExeCommit` and `appVmCommit` as `bytes32` values without checking that either is less than the `BN254` scalar field modulus. Although public-value and proof-data lengths are checked, callers can provide non-canonical 256-bit encodings greater than or equal to that modulus at the Solidity wrapper boundary. Applications relying on the wrapper can therefore accept non-canonical app executable and app VM commitments, creating ambiguity between the supplied byte-level values and the field elements used by the verifier. This issue is fixed in versions 1.7.0, 2.0.0-rc.3 and 2.1.0-preview.10h