K000164208: Java vulnerability CVE-2026-87367

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : OpenJDK 8 vulnerabilities (USN-9009-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9009-1 advisory. It was discovered that the Security...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : OpenJDK 11 vulnerabilities (USN-9010-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9010-1 advisory. It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users....

USN-9014-1: OpenJDK 17 vulnerabilities

It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. CVE-2026-83374 It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker...

USN-9010-1: OpenJDK 11 vulnerabilities

It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. CVE-2026-83374 It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attacker...