Skip to content

Product

oracle jdk vulnerabilities

806 published CVES affecting oracle jdk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
806
Critical
35
High
286
Medium
354
Low
131
Unscored
0
CISA KEV
8

Latest oracle jdk CVEs

Newest publication first · page 1 of 33

  1. CVE-2026-62574 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE:....

    Published
    HighCVSS 7.8 EPSS 0.11%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.2...

  2. CVE-2026-60526 Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attac...

    Published
    MediumCVSS 6.7 EPSS 0.15%

    Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise...

  3. CVE-2026-60166 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network ac...

    Published
    LowCVSS 3.1 EPSS 0.27%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks req...

  4. CVE-2026-60164 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network ac...

    Published
    LowCVSS 3.1 EPSS 0.27%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks req...

  5. CVE-2026-60147 openjdk: Improve certification checking (Oracle CPU 2026-07)

    Published
    MediumCVSS 6.5 EPSS 0.29%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM fo...

  6. CVE-2026-47063 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

    Published
    HighCVSS 7.5 EPSS 0.26%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM f...

  7. CVE-2026-47059 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

    Published
    LowCVSS 3.7 EPSS 0.31%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:...

  8. CVE-2026-47057 openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

    Published
    HighCVSS 7.5 EPSS 0.47%

    Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE...

  9. CVE-2026-47058 openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)

    Published
    HighCVSS 7.4 EPSS 0.39%

    Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

  10. CVE-2026-47034 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network ac...

    Published
    LowCVSS 3.1 EPSS 0.25%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks req...

  11. CVE-2026-47035 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network ac...

    Published
    LowCVSS 3.1 EPSS 0.25%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks req...

  12. CVE-2026-47030 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network ac...

    Published
    LowCVSS 3.1 EPSS 0.25%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks req...

  13. CVE-2026-47027 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

    Published
    MediumCVSS 5.3 EPSS 0.29%

    Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitab...

  14. CVE-2026-47021 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

    Published
    MediumCVSS 5.3 EPSS 0.31%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:...

  15. CVE-2026-47013 Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

    Published
    MediumCVSS 5.3 EPSS 0.41%

    Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of th...

  16. CVE-2026-47010 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

    Published
    LowCVSS 3.7 EPSS 0.25%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for...

  17. CVE-2026-46968 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

    Published
    MediumCVSS 5.9 EPSS 0.29%

    Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit...

  18. CVE-2026-46917 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

    Published
    MediumCVSS 5.3 EPSS 0.29%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0...

  19. CVE-2026-34282 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

    Published
    HighCVSS 7.5 EPSS 0.64%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17...

  20. CVE-2026-34268 openjdk: Enhance key generation (Oracle CPU 2026-04)

    Published
    LowCVSS 2.9 EPSS 0.12%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle Gra...

  21. CVE-2026-22021 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

    Published
    MediumCVSS 5.3 EPSS 0.31%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

  22. CVE-2026-22018 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

    Published
    LowCVSS 3.7 EPSS 0.27%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle Gr...

  23. CVE-2026-22016 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

    Published
    HighCVSS 7.5 EPSS 0.70%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

  24. CVE-2026-22013 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

    Published
    MediumCVSS 5.3 EPSS 0.26%

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM...

  25. CVE-2026-22008 openjdk: Improved Arena allocations (Oracle CPU 2026-04)

    Published
    LowCVSS 3.7 EPSS 0.21%

    Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.