openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Networking component. This vulnerability allows an unauthenticated remote attacker with network access to cause an information disclosure. By supplying crafted input to networking Application Programming Interfaces APIs, such as through an exposed web service, an...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...

openjdk: Enhance Certificate Constraint Checking (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Libraries component. An unauthenticated remote attacker can exploit this vulnerability over a network by submitting crafted data to affected application programming interfaces APIs, or through sandboxed environments that execute untrusted Java code. Successful...

openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this vulnerability over a network by supplying crafted input to Application Programming Interfaces APIs within the Security component. Successful exploitation can result in unauthorized read and modification access to a...

openjdk: Enhance krb5 client (Oracle CPU 2026-10)

A flaw was found in the JGSS Java Generic Security Services component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code in deployments relying on the Java sandbox. Successful exploitation can result in unauthorized access ...

openjdk: Enhance jstatd (Oracle CPU 2026-10)

A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance krb5 tokens (Oracle CPU 2026-10)

A flaw was found in the Java Generic Security Services JGSS component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted requests to exposed application programming interfaces APIs, such as through a web service. A successful attack...

openjdk: Enhance C2 comparisons (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Compiler component. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted data to exposed application programming interfaces APIs, such as through a web service. Successful exploitation could allow the attacker to read, update, or...

openjdk: Enhance Network Clients (Oracle CPU 2026-10)

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...

openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces APIs within the Security component. A successful attack can result in unauthorized modification,...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to networking application programming interfaces APIs. A successful attack could allow unauthorized modification or deletion of accessible data, or resul...

openjdk: Enhance font rendering (Oracle CPU 2026-10)

A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed application programming interfaces APIs, such as through a web service or application that processes graphics data. A successful attack...

openjdk: Enhance HTTP server (Oracle CPU 2026-10)

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

openjdk: Enhance XML Processing (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...

openjdk: Enhance WebRowSets (Oracle CPU 2026-10)

A flaw was found in the Java Database Connectivity JDBC component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed JDBC application programming interfaces APIs or by executing untrusted code. If successfully exploited...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance zipfs (Oracle CPU 2026-10)

A flaw was found in the Libraries component of OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability by supplying crafted data to vulnerable application programming interfaces APIs. Successful exploitation allows the attacker to cause a partial Denial of...