Azul Zulu: CVE-2026-91395: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

PT-2026-118389

Name of the Vulnerable Software and Affected Versions A2A Java SDK versions prior to 1.3.0.Final Description The parseRequestBody function in the RestHandler.java file logs the entire JSON request body at a SEVERE level when JsonFormat.parser.merge throws an InvalidProtocolBufferException. This...

PT-2026-119410

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 26.0.2 Description An issue exists in the Compiler component that allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can be achieved by supplying data to APIs...

Azul Zulu: CVE-2026-83381: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit...

Azul Zulu: CVE-2026-91396: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

Oracle E-Business Suite: CVE-2026-101698: Critical Patch Update

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Java Server Issues. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Azul Zulu: CVE-2026-91379: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JDK tools. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and...

Azul Zulu: CVE-2026-91397: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serviceability. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

Azul Zulu: CVE-2026-91374: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serviceability. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

CVE-2026-112046

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation error triggers an infinite loop within the method resolutio...

CVE-2026-110263

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted Java class file containing deeply nested generic type signatures. When the library parses these signatures using the SignatureReader component, uncontrolled recursion exhausts available...

CVE-2026-110258

A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted, invalid Java class file. Due to improper validation of subroutine instructions, processing the file triggers excessive memory allocation, causing the Java Virtual Machine JVM to crash...

CVE-2026-110260

A flaw was found in OW2 ASM. An attacker can trigger a Denial of Service DoS by providing a specially crafted Java class file containing numerous overlapping exception handlers. When the library analyzes the method stack or frame structures of such a file, it performs excessive memory allocation,...

CVE-2026-110257

A flaw was found in OW2 ASM. An attacker can cause a Denial of Service DoS by providing a specially crafted Java class file. Due to missing attribute length validation during class parsing, processing the file triggers excessive memory allocation, exhausting system resources and crashing the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition,Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-12148

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...

EUVD-2026-104470

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...

CVE-2026-12148 IBM MQ Deserialization of Untrusted Data

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...

CVE-2026-12148

The IBM MQ product is vulnerable to a high-severity security issue where an authenticated attacker could cause a denial of service or potentially execute arbitrary code . The root cause is unrestricted Java deserialization within the MQ Classes for Java . The impact includes high levels of confid...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® SDK, Java™ Technology Edition

Summary IBM Virtualization Engine TS7700 is susceptible to information disclosure and data tampering CVE-2026-60147 and denial of service CVE-2026-16243 vulnerabilities due to the use of IBM SDK, Java Technology Edition, Version 8. TS7700 uses Java to provide the Management Interface. Vulnerabili...