CVE-2026-91453

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

CVE-2026-91451

A vulnerability exists in the Networking component of Oracle Java SE . Affected versions include Oracle Java SE: 8u503 , 8u503-perf , 11.0.32.1 , 17.0.20.1 , 21.0.12.1 , and 25.0.4.1 , as well as specific versions of Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition . This easily explo...

CVE-2026-91451

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-91417

A vulnerability exists in the CORBA component of Oracle Java SE (versions 8u503 and 8u503-perf) and Oracle GraalVM Enterprise Edition (version 21.3.19.1.1). An unauthenticated attacker with network access can exploit this by supplying data to specific APIs, such as through a web service, without ...

CVE-2026-91418

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX:...

CVE-2026-91418

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle JavaFX , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle JavaFX (21.0.12, 25.0.4, 27), Or...

CVE-2026-91415

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and...

CVE-2026-91415

A vulnerability exists in the 2D component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . The issue affects Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; ...

CVE-2026-91411

A vulnerability exists in the JGSS component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM Enterprise Edition 21.3.1...

CVE-2026-91410

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91411

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterpri...

CVE-2026-91410

A vulnerability exists in Oracle Java SE (component: Libraries ) affecting versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, and 25.0.4.1, as well as Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1) and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker with netw...

CVE-2026-91409

A vulnerability exists in the Networking component of Oracle Java SE: 27 . This difficult to exploit flaw allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can result in a partial denial of service (partial DOS) . The v...

CVE-2026-91409

Vulnerability in Oracle Java SE component: Networking. The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability...

CVE-2026-91402

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to...

CVE-2026-91402

A vulnerability exists in the JavaFX component of Oracle Java SE , Oracle JavaFX , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, Oracle JavaFX 21.0.12, 25.0.4, and 27, and Oracle GraalVM Enterprise Edition 21.3.19.1.1. This difficult to exploit vulnerabil...

CVE-2026-91400

A vulnerability exists in the Sound component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Specifically, it affects Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27 ; Oracle GraalVM for JDK versions 17.0.20.1 and 21.0...

CVE-2026-91400

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Sound. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 a...

CVE-2026-91397

A vulnerability in the Serviceability component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with infrastructure access to compromise the affected products. The flaw is difficult to exploit and requires human interaction fro...