alpine/openjdk11 vulnerabilities

Latest alpine/openjdk11 CVEs

Newest publication first · page 1 of 8

1. CVE-2026-62574 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE:....

   Published 2026-07-21

   High·CVSS 7.8 EPSS 0.11%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.2...

2. CVE-2026-60147 openjdk: Improve certification checking (Oracle CPU 2026-07)

   Published 2026-07-21

   Medium·CVSS 6.5 EPSS 0.29%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM fo...

3. CVE-2026-47063 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

   Published 2026-07-21

   High·CVSS 7.5 EPSS 0.26%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM f...

4. CVE-2026-47059 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

   Published 2026-07-21

   Low·CVSS 3.7 EPSS 0.31%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:...

5. CVE-2026-47057 openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

   Published 2026-07-21

   High·CVSS 7.5 EPSS 0.47%

   Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE...

6. CVE-2026-47058 openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)

   Published 2026-07-21

   High·CVSS 7.4 EPSS 0.39%

   Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

7. CVE-2026-47027 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

   Published 2026-07-21

   Medium·CVSS 5.3 EPSS 0.29%

   Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitab...

8. CVE-2026-47021 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

   Published 2026-07-21

   Medium·CVSS 5.3 EPSS 0.31%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:...

9. CVE-2026-47010 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

   Published 2026-07-21

   Low·CVSS 3.7 EPSS 0.25%

   Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for...

10. CVE-2026-46968 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

    Published 2026-07-21

    Medium·CVSS 5.9 EPSS 0.29%

    Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit...

11. CVE-2026-46917 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

    Published 2026-07-21

    Medium·CVSS 5.3 EPSS 0.29%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0...

12. CVE-2026-34282 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

    Published 2026-04-21

    High·CVSS 7.5 EPSS 0.64%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17...

13. CVE-2026-34268 openjdk: Enhance key generation (Oracle CPU 2026-04)

    Published 2026-04-21

    Low·CVSS 2.9 EPSS 0.12%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle Gra...

14. CVE-2026-22021 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

    Published 2026-04-21

    Medium·CVSS 5.3 EPSS 0.31%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

15. CVE-2026-22018 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

    Published 2026-04-21

    Low·CVSS 3.7 EPSS 0.27%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle Gr...

16. CVE-2026-22016 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

    Published 2026-04-21

    High·CVSS 7.5 EPSS 0.70%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

17. CVE-2026-22013 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

    Published 2026-04-21

    Medium·CVSS 5.3 EPSS 0.26%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

18. CVE-2026-22007 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

    Published 2026-04-21

    Low·CVSS 2.9 EPSS 0.12%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle Gra...

19. CVE-2026-41254 Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

    Published 2026-04-18

    High·CVSS 7.5 EPSS 0.36%

    Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

20. CVE-2026-23865 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tab...

    Published 2026-03-02

    Medium·CVSS 5.3 EPSS 0.17%

    An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

21. CVE-2026-21945 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

    Published 2026-01-20

    High·CVSS 7.5 EPSS 0.99%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM...

22. CVE-2026-21933 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

    Published 2026-01-20

    Medium·CVSS 6.1 EPSS 0.30%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalV...

23. CVE-2026-21932 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

    Published 2026-01-20

    High·CVSS 7.4 EPSS 0.53%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle Graal...

24. CVE-2026-21925 openjdk: Improve JMX connections (Oracle CPU 2026-01)

    Published 2026-01-20

    Medium·CVSS 4.8 EPSS 0.25%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for J...

25. CVE-2025-53066 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u4...

    Published 2025-10-21

    High·CVSS 7.5 EPSS 0.69%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.