Oracle Critical Patch Update — April 2026
Tuesday, 21 April 2026
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 5
- Critical 9.8
- Critical 9.1
- Critical 9.1
- Critical 9.1
- Critical 9.1
Public exploit code 19
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.6
- High 7.5
- High 7.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.0
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.3
- Low 3.8
All vulnerabilities 102
Critical5 ShowHide
- Critical 9.8
- Critical 9.1
- Critical 9.1
- Critical 9.1
- Critical 9.1
High21 ShowHide
- High 8.7
- High 8.5
- High 8.1
- High 7.8
- High 7.6
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.2
Medium67 ShowHide
- Medium 6.8
- Medium 6.8
- Medium 6.6
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.4
- Medium 6.3
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 6.0
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.8
- Medium 5.7
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.2
- Medium 5.0
- Medium 5.0
- Medium 5.0
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.8
- Medium 4.7
- Medium 4.3
- Medium 4.3
Low9 ShowHide
- Low 3.8
- Low 3.7
- Low 3.7
- Low 3.2
- Low 2.9
- Low 2.9
- Low 2.7
- Low 2.4
- Low 2.3