Skip to content
OpenAdvisories

Patch days / October 2026

Oracle Critical Patch Update — October 2026

Tuesday, 20 October 2026

Vulnerabilities
1,077
Critical
65
High
383
Zero-days
0
Public exploit
3

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 65

40 more in the full list below.

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

All vulnerabilities 1,077

Critical65 Show
High383 Show
Medium538 Show
Low91 Show