27 matches found
CVE-2026-91477
A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to load and run untrusted code within a sandboxed client application. A successful attack allows unauthorized read access to a subset of accessible data, resulting in information...
CVE-2026-91402
A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to run untrusted code in a sandboxed client environment. Successful exploitation allows the attacker to obtain unauthorized read access to sensitive data, leading to information...
CVE-2026-91385
A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code in a sandboxed Java environment. Successful exploitation allows the attacker to obtain unauthorized read and write access to application data, resulting in...
OPENSUSE-SU-2026:11368-1 openjfx-17.0.20.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...
openjfx-17.0.18.0-1.1 on GA media (moderate)
openjfx-17.0.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10204-1 Rating: moderate Cross-References: CVE-2026-21947 CVSS scores: CVE-2026-21947 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...
OPENSUSE-SU-2026:10204-1 openjfx-17.0.18.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed...
africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1, <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0, <=0.1.1) +24488 more potentially affected by CVE-2025-68161 via org.apache.logging.log4j:log4j-core (>=2.0-beta9, <=2.25.2)
org.apache.logging.log4j:log4j-core MAVEN version =2.0-beta9, =0.14.1, =0.1.0, =0.9.6, =0.12.0, =0.9.6, =0.9.6, =0.9.6, =0.9.6, =0.14.1, =0.9.6, =0.14.1, =4.4.0.0, =1.4.6, =1.4.6, =1.4.9 and more Source cves: CVE-2025-68161 Source advisory: OSV:GHSA-VC5P-V9HR-52MJ...
OPENSUSE-SU-2024:13609-1 openjfx-17.0.10.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13919-1 openjfx-17.0.11.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11119-1 openjfx-11.0.12-2.2 on GA media
These are all security issues fixed in the openjfx-11.0.12-2.2 package on the GA media of openSUSE Tumbleweed...
Fedora: Security Advisory for openjfx (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for openjfx8 (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: openjfx-17.0.11.0-2.fc40
JavaFX/OpenJFX is a set of graphics and media APIs that enables Java developers to design, create, test, debug, and deploy rich client applications that operate consistently across diverse platforms. The media module have been removed due to missing dependencies...
GHSA-47G3-MF24-6559 Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...
Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...
CVE-2022-2122
DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemuxinflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a...
Amazon Corretto Java 8.x < 8.242.07.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is prior to 8 8.242.07.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2020-Jan-14 advisory. - OpenJFX libxslt CVE-2019-13117, CVE-2019-13118 - OpenJFX SQLite CVE-2019-16168 - Serialization...
Privilege Escalation
openjfx is vulnerable to privilege escalation. A malicious user could exploit the vulnerability in Java SE and JavaFX components to gain elevated privileges...
Remote Code Execution (RCE)
openjfx is vulnerable to remote code execution RCE. The vulnerability exists due to the lack of proper validation of user-supplied data in HTML rendering in JavaFX which could result in a write past the end of an allocated data structure, allowing a malicious user to execute code in the context o...