openjdk: Improve ciphertext handling (Oracle CPU 2026-10)

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

openjdk: Improve ciphertext handling (Oracle CPU 2026-10)

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

openjdk: Improve ciphertext handling (Oracle CPU 2026-10)

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

AegisJava

AegisJava A specialized tool to detect and mitigate CVE-2025-30749 , a critical Remote Code Execution RCE vulnerability in Oracle Java SE. Vulnerability Details CVE : CVE-2025-30749 Severity : High CVSS 8.1 Affected Components : Java 2D Impact : Unauthenticated Remote Code Execution Usage 1. Run...

CLEANSTART-2025-BX24016 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk23 package. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization...

CLEANSTART-2025-CC48663 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Security vulnerability affects the openjdk23 package. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking...

CLEANSTART-2025-YJ07244 Vulnerability in Oracle Java SE (component: Hotspot)

Security vulnerability affects the openjdk23 package. Vulnerability in Oracle Java SE component: Hotspot...

CLEANSTART-2025-NQ13267 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Security vulnerability affects the openjdk23 package. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot...

CLEANSTART-2025-SN76083 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Security vulnerability affects the openjdk23 package. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot...

CLEANSTART-2026-FL39649 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk21 package. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

openjdk: Improve ciphertext handling (Oracle CPU 2026-10)

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2026-3371)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3371 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Important: java-1.8.0-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Oracle Java SE 27.0.1.0.2 JSSE Certificate Trust Exposure Detector

Oracle Java SE and Oracle GraalVM versions contain a JSSE certificate trust vulnerability. This offline tool identifies exact affected product and build combinations from supplied inventory data; it does not assess runtime configuration...

Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2026-3373)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3373 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...