The vulnerabilities of the AWT and JavaFX components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allow attackers to gain access to, read, modify, and delete data.

🗓️ 22 Jan 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerabilities in java awt and javafx components of Oracle Java SE and GraalVM allow data read, modification, and deletion due to weak data protection.

Reporter	Title	Published	Views	Family All 292
IBM Security Bulletins	Security Bulletin:IBM Storage Protect Server is vulnerable to an unauthenticated attacker with network access via multiple protocols and TLS due to IBM SDK, Java (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925).	27 Mar 202600:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	29 Jul 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Semeru Runtime and IBM SDK, Java™ Technology Edition affect IBM Virtualization Engine TS7700	27 Apr 202621:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple Java vulnerabilities (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)	7 May 202618:40	–	ibm
IBM Security Bulletins	Security Bulletin: Enterprise Content Managemant System Monitor for March 2026 - multiple CVEs	23 Apr 202616:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.	9 Mar 202614:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925))	28 Apr 202610:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM Java SDK (CVE-2026-21945,CVE-2026-21932,CVE-2026-21933 & CVE-2026-21925))	26 Feb 202616:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.	24 Feb 202612:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Advanced Communications is vulnerable to issues due to Java SDK (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)	1 Jul 202613:01	–	ibm

Vulners

Node

oracle java_seMatch8u471

oracle java_seMatch8u471-b50

oracle java_seMatch8u471-perf

oracle java_seMatch11.0.29

oracle java_seMatch17.0.17

oracle java_seMatch21.0.9

oracle java_seMatch25.0.1

oracle oracle_graalvm_for_jdkMatch17.0.17

oracle oracle_graalvm_for_jdkMatch21.0.9

oracle graalvm_enterprise_editionMatch21.3.16

google android_studioMatch2025.2.3.9

axiom_jdk axiom_axiomjdkRange<8u452

axiom_jdk axiom_axiomjdkRange<11.0.27

axiom_jdk axiom_axiomjdkRange<17.0.15

axiom_jdk axiom_axiomjdkRange<21.0.7

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2026.html
altsp	www.altsp.su/obnovleniya-bezopasnosti/
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-java-1-8-0-openjdk-cve-2026-21932-7.3/
web	www.web.nvd.nist.gov/view/vuln/detail

07 Jul 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.4

CVSS 27.8

EPSS0.00427