vulnerability

Oracle Database: Critical Patch Update - January 2026 (CVE-2025-13837)

Try Surface Command
Back to search
Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Jan 20, 2026
Added
Jan 21, 2026
Modified
Jan 21, 2026

Description

When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues

Solution

oracle-apply-jan-2026-cpu

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today