K000163004: Oracle Java vulnerability CVE-2026-47035

Security Advisory Description Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

Oracle Java SE Denial of Service Vulnerability (August 2026 CSPU)

The 25.0.4 or 26.0.2 version of Java installed on the remote host is affected by a denial of service vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Java SE product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE...

Oracle Java SE Multiple Vulnerabilities (August 2026 CSPU)

The 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2 versions of Java installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

vulnerabilities present in Oracle Java SE

Oracle has identified vulnerabilities in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. These vulnerabilities affect several supported versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthorized attacker with network...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-61308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versio...

Linux Distros Unpatched Vulnerability : CVE-2026-70907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions tha...

Linux Distros Unpatched Vulnerability : CVE-2026-60589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions...

DEBIAN-CVE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

CVE-2026-70907

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...