CVE Tools
Track your stack

Oracle

11,779 CVEs tracked since 1999. Since Aug 2019, 35 of them reached CISA KEV.

Oracle CVEs per month

Aug 2019 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Oracle CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2019-08210
2019-09190
2019-101511
2019-11170
2019-12301
2020-012222
2020-02111
2020-03240
2020-04null or fewer
2020-05null or fewer
2020-06220
2020-07null or fewer
2020-08151
2020-09170
2020-101734
2020-11121
2020-12291
2021-011691
2021-02230
2021-03null or fewer
2021-041910
2021-05120
2021-06330
2021-071560
2021-08481
2021-09141
2021-101612
2021-11120
2021-12200
2022-011862
2022-02220
2022-03261
2022-04983
2022-05130
2022-0690
2022-07960
2022-08null or fewer
2022-09null or fewer
2022-10811
2022-11220
2022-1250
2023-01822
2023-0280
2023-03null or fewer
2023-04920
2023-05null or fewer
2023-06null or fewer
2023-07570
2023-08null or fewer
2023-0941
2023-10750
2023-11null or fewer
2023-12null or fewer
2024-01430
2024-02471
2024-03null or fewer
2024-041350
2024-05null or fewer
2024-06null or fewer
2024-07631
2024-08null or fewer
2024-09null or fewer
2024-10880
2024-1161
2024-1281
2025-01880
2025-02170
2025-03null or fewer
2025-04730
2025-05null or fewer
2025-06null or fewer
2025-07850
2025-08null or fewer
2025-09null or fewer
2025-10783
2025-11null or fewer
2025-12null or fewer
2026-01660
2026-02null or fewer
2026-03null or fewer
2026-041020
2026-05320
2026-062431
2026-0711080
2026-088900
2026-096340

Products

The products that kept showing up in Oracle's monthly top three, with their CVEs summed over those months.

  1. MySQL Server61924 months
  2. MySQL47916 months
  3. Oracle Hyperion Financial Management1592 months
  4. E-business Suite15811 months
  5. Helidon991 month
  6. Oracle Coherence981 month
  7. Coherence931 month
  8. Webcenter Content862 months
  9. Hyperion Financial Management801 month
  10. Vm VirtualBox695 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Oracle.

  1. CVE-2026-87289Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerabili...7.5
  2. CVE-2026-87284Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...3.2
  3. CVE-2026-87285Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...6.0
  4. CVE-2026-87282Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...6.0
  5. CVE-2026-87283Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...6.0
  6. CVE-2026-87281Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...3.2
  7. CVE-2026-87278Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthentic...6.1
  8. CVE-2026-87280Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...4.2
  9. CVE-2026-87279Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privile...6.1
  10. CVE-2026-87277Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthentic...7.5
  11. CVE-2026-87275Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privil...4.6
  12. CVE-2026-87274Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privi...4.4
  13. CVE-2026-87276Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privi...7.5
  14. CVE-2026-87272Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privile...7.8
  15. CVE-2026-87273Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthentic...8.6

The record

Peak rank
#1 in Jul 2026
Busiest month shown
Jul 2026, 1,108 CVEs
Months with a KEV entry
24 since Aug 2019
Monthly snapshots
236 since 1999
Oracle's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store