CVE-2025-43541

CVE-2025-43541 WARNING: POTENTIALLY UNSAFE CODE This repository contains a JavaScript / HTML Proof of Concept PoC related to a potential WebKit / JavaScriptCore vulnerability identified as CVE-2025-43541. Disclaimer This code may be unsafe. Running this HTML file can crash the browser, especially...

CLSA-2026-1785266060 java-1.8.0-openjdk: Fix of 11 CVEs

Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image...

CVE-2026-53496

ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox and parseBox accept an eight-byte box header withou...

CLSA-2026-1786706544 java-11-openjdk: Fix of 8 CVEs

Upgrade to openjdk-11.0.32+9 GA. The following CVEs were fixed: - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation...

CLSA-2026-1786707117 java-11-openjdk: Fix of 8 CVEs

Upgrade to openjdk-11.0.32+9 GA. The following CVEs were fixed: - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation...

CLSA-2026-1786485204 Fix CVE(s): CVE-2026-47057, CVE-2026-47058, CVE-2026-47063

OpenJDK 8u502 release, build 7 Oracle July 2026 CPU. Release notes: https://openjdk.org/groups/vulnerability/advisories/2026-07-21 - Security fixes 8u502: + CVE-2026-41254: 2D integer overflow in Little CMS CubeSize + CVE-2026-46968: JSSE TLS certificate handling + CVE-2026-47010: ImageIO JPEG...

openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)

A flaw was found in OpenJDK. 1 DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2 Missing bounds check in the DataView constructor fails to validate the capacity...

CLSA-2026-1785152037 java-1.8.0-openjdk: Fix of 10 CVEs

Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image...

CLSA-2026-1785152373 java-1.8.0-openjdk: Fix of 10 CVEs

Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image...

MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8 (AXSA:2026-1388:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1388:12 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK:...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: OpenJDK 8u502 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Important: Red Hat Security Advisory: OpenJDK 11.0.32 ELS Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Important: Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit...

RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:42880)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42880 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

RHEL 7 : java-1.8.0-openjdk (RHSA-2026:42876)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42876 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK: Enhance...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2023-44981 DESCRIPTION: Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-46295 DESCRIPTION: Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when...