Oracle has released a scheduled Critical Patch Update for its products, targeting critical issues and vulnerabilities. The September update addresses 673 vulnerabilities.
Some problems:
- There are 19 vulnerabilities in VirtualBox. The most serious issue (CVE-2026-87273) is assigned a severity level of 8.6 out of 10, and there are five more issues, four of which are specific to Windows, assigned a severity level of 7.8 out of 10. Based on the severity level, these vulnerabilities allow access to the host environment from the guest system. The issues were fixed in VirtualBox 7.2.18.
- One locally exploitable vulnerability has been identified in Oracle Communications products. server MySQL, which has a danger level of 6.5 out of 10.
- Three vulnerabilities have been identified in Java SE related issues. virtual machine GraalVM, exploited remotely via HTTP (danger level 8.1 out of 10).
- In Solaris, no issues were reported and no corrective releases were generated.
Source: opennet.ru
