Veille CVE

Mai 2026

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Oracle linux » ✕
  1. CVE-2026-8654 8.7 Élevée

    Delphix Continuous data IBM Db2 Connector · Delphix Continuous data MangoDB Connector · Delphix Continuous data PostgreSQL Connector · Delphix Continuous data MySQL Connector

    Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

  2. CVE-2026-35233 4.4 Moyenne

    Oracle Corporation Oracle Linux · Oracle linux

    An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap memory beyond the allocated section cache array without any bounds check. This results in an uninitialized/out-of-bounds heap read that can cause a NULL pointer dereference crash of the dtrace process (DoS), or -- depending on heap layout -- a read-then-use of a garbage pointer controlled by adjacent allocations, providing a foothold toward further exploitation in a privileged context.

  3. CVE-2026-21996 5.5 Moyenne

    Oracle Corporation Oracle Linux · Oracle linux

    An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()