Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 25 vulnerabilities (USN-8783-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8783-1 advisory. Weber Leon discovered that the 2D component of OpenJDK 25 did not correctly handle user authentication. A remote attacker could...

OESA-2026-3759 openjdk-21 security update

The OpenJDK runtime environment. Security Fixes: Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program leaks memory in various locations, eventually leading to high memory usage and causi...

SUSE CVE-2026-71054

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

OpenJDK: Improve font loading (2026-08 Security Update)

A flaw was found in OpenJDK. A remote attacker could cause a denial of service DoS by supplying a specially crafted font file. Processing the malicious font triggers an unrecoverable exception during a Foreign Function and Memory FFM API upcall, forcing the Java Virtual Machine JVM to terminate...

CVE-2026-71054

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

CVE-2026-71054

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

EUVD-2026-66711

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

CVE-2026-71054

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

CVE-2026-71054

CVE-2026-71054 affects the 2D component of Oracle Java SE 7u511 . An unauthenticated attacker with network access via multiple protocols can trigger a complete denial of service (hang or repeatable crash). The vulnerability is reachable through APIs in the 2D component, including scenarios where ...

BIT-JRE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

BIT-JAVA-MIN-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

BIT-JAVA-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

CVE-2026-71054: Allocation of Resources Without Limits or Throttling

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

PT-2026-82279

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

K000163082: OpenJDK vulnerability CVE-2026-70906

Security Advisory Description Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE...

OpenJDK: Improve font loading (2026-08 Security Update)

A flaw was found in OpenJDK. A remote attacker could cause a denial of service DoS by supplying a specially crafted font file. Processing the malicious font triggers an unrecoverable exception during a Foreign Function and Memory FFM API upcall, forcing the Java Virtual Machine JVM to terminate...

Oracle Java SE Denial of Service Vulnerability (August 2026 CSPU)

The 25.0.4 or 26.0.2 version of Java installed on the remote host is affected by a denial of service vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Java SE product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE...

Linux Distros Unpatched Vulnerability : CVE-2026-70906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allo...

CVE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

DEBIAN-CVE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...