openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

A flaw was found in OpenJDK. A remote attacker can cause a Denial of Service DoS by inducing excessive processor utilization. When communicating over a Transport Layer Security TLS connection, if a remote server sends a connection closure notification but subsequently transmits additional data ov...

openjdk: Enhance key generation (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

openjdk: Enhance key generation (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK:...

openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering a stack overflow during certificate chain validation. By supplying a specially crafted certificate chain, an attacker can cause the affected application ...

openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

A flaw was found in OpenJDK. Because initial authentication challenges are transmitted in cleartext, a remote attacker intercepting network traffic can modify the iteration count during Kerberos authentication. This manipulation can enable key recovery, leading to sensitive information disclosure...

openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

A flaw was found in openjdk. When compiling XPath expressions, the internal XML security manager is not properly initialized, failing to restrict external entity resolution. A remote attacker could exploit this vulnerability by supplying specially crafted XML input to trigger XML External Entity...

mysql: Optimizer unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network...

mysql: InnoDB unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via...

openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

A flaw was found in OpenJDK. Because initial authentication challenges are transmitted in cleartext, a remote attacker intercepting network traffic can modify the iteration count during Kerberos authentication. This manipulation can enable key recovery, leading to sensitive information disclosure...

openjdk: Improved Arena allocations (Oracle CPU 2026-04)

Vulnerability in Oracle Java SE component: Libraries. The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

A flaw was found in openjdk. When compiling XPath expressions, the internal XML security manager is not properly initialized, failing to restrict external entity resolution. A remote attacker could exploit this vulnerability by supplying specially crafted XML input to trigger XML External Entity...

openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

A flaw was found in openjdk. When compiling XPath expressions, the internal XML security manager is not properly initialized, failing to restrict external entity resolution. A remote attacker could exploit this vulnerability by supplying specially crafted XML input to trigger XML External Entity...

openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

A flaw was found in OpenJDK. Because initial authentication challenges are transmitted in cleartext, a remote attacker intercepting network traffic can modify the iteration count during Kerberos authentication. This manipulation can enable key recovery, leading to sensitive information disclosure...

openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

A flaw was found in OpenJDK. A remote attacker can cause a Denial of Service DoS by inducing excessive processor utilization. When communicating over a Transport Layer Security TLS connection, if a remote server sends a connection closure notification but subsequently transmits additional data ov...

openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering a stack overflow during certificate chain validation. By supplying a specially crafted certificate chain, an attacker can cause the affected application ...

openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

A flaw was found in openjdk. When compiling XPath expressions, the internal XML security manager is not properly initialized, failing to restrict external entity resolution. A remote attacker could exploit this vulnerability by supplying specially crafted XML input to trigger XML External Entity...

openjdk: Enhance key generation (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering a stack overflow during certificate chain validation. By supplying a specially crafted certificate chain, an attacker can cause the affected application ...