67 matches found
CVE-2023-22045
CVE-2023-22045 affects Oracle Java SE (Hotspot) and Oracle GraalVM variants (Enterprise Edition and JDK). Affected versions include Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; GraalVM Enterprise: 20.3.10, 21.3.6, 22.3.2; GraalVM for JDK: 17.0.7, 20.0.1. The vulnerability is diffic...
CVE-2023-22044
CVE-2023-22044 affects OpenJDK/OpenJDK-based runtimes (e.g., Debian openjdk-17, AlmaLinux java-17-openjdk) as part of the July 2023 Java updates. Connected advisories confirm it is among multiple OpenJDK vulnerabilities and are addressed by updates to OpenJDK 17 (e.g., 17.0.8) across distribution...
CVE-2023-22081
CVE-2023-22081 is a vulnerability in the Oracle Java SE line and related GraalVM products (JSSE component) with affected versions including Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7, 22.3.3. The i...
CVE-2025-21502
CVE-2025-21502 affects Oracle Java SE and related GraalVM packages (Hotspot) across multiple supported versions (Java SE 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; GraalVM JDK 17.0.13/21.0.5/23.0.1; GraalVM EE 20.3.16/21.3.12). The described vulnerability allows an unauthenticated, network-acc...
CVE-2023-22025
CVE-2023-22025 affects multiple Java runtimes (Oracle Java SE, GraalVM for JDK, GraalVM Enterprise) with vulnerable components in Hotspot. Affected versions listed include Oracle Java SE 8u381-perf, 17.0.8, 21; GraalVM for JDK 17.0.8 and 21; GraalVM EE 21.3.7/22.3.3. The connected Broadcom Azul Z...
CVE-2024-20918
CVE-2024-20918 affects Oracle Java SE (8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1), Oracle GraalVM for JDK (17.0.9, 21.0.1), and Oracle GraalVM Enterprise Edition (20.3.12, 21.3.8, 22.3.4). The vulnerability, which is network-accessible via multiple protocols, can allow an unauthenticated attacke...
CVE-2024-21011
CVE-2024-21011 affects Oracle Java SE platforms (Hotspot) and Oracle GraalVM for JDK/Enterprise Edition. Affected versions include Java SE: 8u401, 11.0.22, 17.0.10, 21.0.2, 22; GraalVM for JDK: 17.0.10, 21.0.2, 22; GraalVM EE: 20.3.13, 21.3.9. The vulnerability is exploitable over a network by un...
CVE-2023-22049
CVE-2023-22049 affects Oracle Java SE and related GraalVM variants (Libraries component; and others listed) with affected versions including Oracle Java SE 8u371/8u371-perf/11.0.19/17.0.7/20.0.1; Oracle GraalVM Enterprise Edition and GraalVM for JDK versions. Exploitation is described as difficul...
CVE-2024-21131
CVE-2024-21131 affects Oracle Java SE (Hotspot) and Oracle GraalVM for JDK/Enterprise Edition. Affected versions include Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; GraalVM Enterprise: 20.3.14, 21.3.10. An unauthenticated network attacke...
CVE-2024-20945
CVE-2024-20945 affects Oracle Java SE and related GraalVM products. Affected: Oracle Java SE 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition 20.3.12, 21.3.8, 22.3.4. Under the Security component, the vulnerability can be exploit...
CVE-2024-21147
The CVE-2024-21147 entry describes a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Hotspot component) affecting multiple supported versions: Java SE 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK 17.0.11, 21.0.3, 22.0.1; Graa...
CVE-2024-20921
The CVE-2024-20921 issue is in Oracle Java SE (Hotspot) and related Oracle GraalVM offerings. Affected products/versions identified in sources: Oracle Java SE 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK 17.0.9 and 21.0.1; Oracle GraalVM Enterprise Edition 20.3.12, 21.3.8, 2...
CVE-2025-21587
CVE-2025-21587 affects Oracle Java SE and GraalVM family (JSSE component; also noted under Compiler and 2D in some advisories) with multiple supported versions listed (e.g., Java SE 8u441, 11.0.26, 17.0.14, 21.0.6, 24; GraalVM for JDK 17.0.14, 21.0.6, 24; GraalVM Enterprise 20.3.17/21.3.13). The ...
CVE-2024-20952
CVE-2024-20952 affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Security component). Affected Oracle Java SE versions: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK: 17.0.9, 21.0.1; GraalVM Enterprise Edition: 20.3.12, 21.3.8, 22.3.4. The initia...
CVE-2023-22006
CVE-2023-22006 affects Oracle Java SE (Networking) and GraalVM variants; listed affected versions include Oracle Java SE 11.0.19, 17.0.7, 20.0.1; GraalVM EE 20.3.10, 21.3.6, 22.3.2; GraalVM for JDK 17.0.7 and 20.0.1. The vulnerability is hard to exploit and requires network access via multiple pr...
CVE-2024-20926
CVE-2024-20926 affects Oracle Java SE and related GraalVM products (Scripting component). Affected versions include Oracle Java SE 8u391, 8u391-perf, 11.0.21; GraalVM for JDK 17.0.9; GraalVM Enterprise 20.3.12, 21.3.8, 22.3.4. The vulnerability allows an unauthenticated attacker with network acce...
CVE-2023-22041
This CVE (CVE-2023-22041) affects Oracle Java SE and Oracle GraalVM products, including: Oracle Java SE 8u371-perf, 11.0.19, 17.0.7, 20.0.1; GraalVM Enterprise 20.3.10, 21.3.6, 22.3.2; GraalVM for JDK 17.0.7 and 20.0.1. The vulnerability is exploitable by an unauthenticated attacker with a login ...
CVE-2023-22036
CVE-2023-22036 is described across the primary record as vulnerability in Oracle Java SE, GraalVM (Utility) with affected versions across Oracle Java SE 11.0.19, 17.0.7, 20.0.1 and GraalVM 20.3.10, 21.3.6, 22.3.2; attackable by unauthenticated network access via multiple protocols, potentially en...
CVE-2024-20919
CVE-2024-20919 affects Oracle Java SE and GraalVM family (Hotspot component). Affected: Oracle Java SE 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK 17.0.9, 21.0.1; GraalVM Enterprise 20.3.12, 21.3.8, 22.3.4. Vulnerability allows unauthenticated network access via multiple protocols...
CVE-2024-21140
CVE-2024-21140 affects Oracle Java SE and Oracle GraalVM products (Hotspot, 2D, Networking, Serialization, Concurrency). Affects multiple supported Java runtimes (e.g., Java SE 8u411/11.0.23/17.0.11/22.0.1; GraalVM JDK 17.0.11/21.0.3/22.0.1; GraalVM EE 20.3.14/21.3.10). Described as remotely expl...
CVE-2024-21094
CVE-2024-21094 affects Oracle Java SE Hotspot and Oracle GraalVM variants, with affected versions including Java SE 8u401/11.0.22/17.0.10/21.0.2/22 and GraalVM JDK 17.0.10/21.0.2/22, and GraalVM Enterprise 20.3.13/21.3.9. The vulnerability can be exploited remotely via multiple protocols to allow...
CVE-2024-21012
The CVE-2024-21012 entry concerns Oracle Java SE and Oracle GraalVM variants (JDK and Enterprise Edition) with a Networking component vulnerability. Affected products/versions include Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; GraalVM for JDK: 17.0.10, 21.0.2, 22; GraalVM Enterprise Edition: 2...
CVE-2024-21138
CVE-2024-21138 affects Oracle Java SE Hotspot and Oracle GraalVM for JDK/Enterprise Edition (as listed in the initial document). Affected versions include Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterpris...
CVE-2024-21068
CVE-2024-21068 affects Oracle Java SE Hotspot (and related GraalVM/JavaFX components) across multiple supported JDK/OpenJDK lines. Affected versions include 8u401, 11.0.22, 17.0.10, 21.0.2, 22 (and GraalVM JDK 17.0.10/21.0.2/22; EE 21.3.9). Impact is unauthenticated remote compromise with possibl...
CVE-2024-21235
CVE-2024-21235 affects Oracle Java SE Hotspot and related GraalVM/Enterprise packages across multiple Oracle Java SE versions (8u421, 11.0.24, 17.0.12, 21.0.4, 23; and GraalVM/JDK variants). Affected components include Hotspot, Serialization, 2D, Networking, and Concurrency, with unauthenticated ...
CVE-2024-21208
CVE-2024-21208 affects Oracle Java SE and related GraalVM variants (Networking component; also appears under Hotspot/Serialization/other Java components in alternate advisories). Affected versions include Java SE 8u421, 11.0.24, 17.0.12, 21.0.4, 23 and corresponding GraalVM/JDK builds; similar li...
CVE-2024-21145
CVE-2024-21145 affects Oracle Java SE and Oracle GraalVM suites (component: 2D). Affected: Java SE versions 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK versions 17.0.11, 21.0.3, 22.0.1; GraalVM Enterprise Edition 20.3.14 and 21.3.10. The description states a difficult‑to‑...
CVE-2024-21217
Summary of CVE-2024-21217 details (from connected advisories): Affects Oracle Java SE and Oracle GraalVM families (JDK and Enterprise) with components including Serialization, Networking, and Hotspot. Affected Java SE versions include 8u421, 11.0.24, 17.0.12, 21.0.4, 23; GraalVM for JDK/EE includ...
CVE-2024-20932
CVE-2024-20932 affects Oracle Java SE and GraalVM offerings (Java SE 17.0.9; GraalVM for JDK 17.0.9; GraalVM Enterprise 21.3.8, 22.3.4) in the Security component. The vulnerability allows unauthenticated, network-exposed attackers to modify or view data in affected deployments, with CVSS 3.1 metr...
CVE-2025-30691
CVE-2025-30691 affects Oracle Java SE (Compiler) and Oracle GraalVM for JDK, with affected Oracle Java SE versions 21.0.6 and 24 and GraalVM JDK 21.0.6 and 24. The issue can be exploited remotely over network via multiple protocols and through APIs that supply data to the APIs; successful attacks...
CVE-2025-30698
Summary of CVE-2025-30698 from provided documents: This vulnerability affects Oracle Java SE and Oracle GraalVM variants (Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; GraalVM for JDK: 17.0.14, 21.0.6, 24; GraalVM EE: 20.3.17, 21.3.13) across components such as 2D, JSSE, and Compiler....
CVE-2025-30749
CVE-2025-30749 affects Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition (component: 2D, with JSSE/Networking/Scripting as other components) per the provided documents. Affected Oracle Java SE versions include 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; affected GraalVM for ...
CVE-2025-53066
CVE-2025-53066 affects Oracle Java SE and GraalVM components (Security and JAXP). Affected releases include Oracle Java SE 8u461, 11.0.28, 17.0.16, 21.0.8, 25; GraalVM for JDK 17.0.16/21.0.8; GraalVM Enterprise Edition 21.3.15. The flaw enables unauthenticated network-accessed compromise, with po...
CVE-2026-22016
CVE-2026-22016 affects Oracle Java SE (JAXP component) and Oracle GraalVM variants; affected versions include Oracle Java SE 8u481, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26, plus GraalVM for JDK 17.0.18 and 21.0.10 and GraalVM Enterprise 21.3.17. The vulnerability, exploitable over the network via m...
CVE-2025-50059
CVE-2025-50059 targets Oracle Java SE and GraalVM family (Networking and related components). Affected versions include Oracle Java SE 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise 21.3.14. The issue enables unauthenticated, network-acce...
CVE-2025-53057
CVE-2025-53057 is a vulnerability in Oracle Java SE and Oracle GraalVM families (including JDK and Enterprise Edition) affecting multiple supported versions (e.g., Java SE 8u461, 11.0.28, 17.0.16, 21.0.8, 25; GraalVM JDK 17.0.16/21.0.8; EE 21.3.15). The issue spans components such as Security, JA...
CVE-2026-22007
CVE-2026-22007 affects Oracle Java SE and Oracle GraalVM products in the Security component. Affected versions include Java SE: 8u481, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; GraalVM for JDK: 17.0.18, 21.0.10; GraalVM Enterprise: 21.3.17. The vulnerability allows an unauthenticated attacker with l...
CVE-2024-21211
CVE-2024-21211 affects Oracle Java SE (Compiler) and related GraalVM products. Affected: Oracle Java SE 23; GraalVM for JDK 17.0.12, 21.0.4, 23; GraalVM Enterprise Edition 20.3.15, 21.3.11. Vulnerability can be exploited by network access via multiple protocols to cause unauthorized updates/inser...
CVE-2024-21098
CVE-2024-21098 affects Oracle GraalVM for JDK (versions 17.0.10, 21.0.2, 22) and Oracle GraalVM Enterprise Edition (20.3.13, 21.3.9). The vulnerability can be exploited by an unauthenticated attacker over the network via multiple protocols to cause a partial denial of service. The connected docum...
CVE-2025-30754
CVE-2025-30754 affects Oracle Java SE and Oracle GraalVM (JSSE) with multiple affected versions across Java SE and GraalVM variants. Affected: Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise Edition 21.3.14. The vulnerabilit...
CVE-2025-50106
CVE-2025-50106 affects Oracle Java SE and Oracle GraalVM family (including JDK/Enterprise Edition) with affected component 2D (also appears under JSSE/Networking and Scripting in some advisories). Affected Oracle Java SE versions include 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; affect...
CVE-2026-21945
CVE-2026-21945 is addressed in multiple connected advisories across Linux distros (e.g., Debian DSA-6112-1 and Amazon ALAS updates). Debian openjdk-21 was fixed in 21.0.10+7-1~deb13u1, and similar ALAS notices patch Java 11/17/25 variants in Amazon Linux 2/2023. The vulnerabilities affect OpenJDK...
CVE-2026-47063
CVE-2026-47063 affects Oracle Java SE and Oracle GraalVM products (Libraries component). Affected: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; GraalVM for JDK 17.0.19, 21.0.11; GraalVM Enterprise Edition 21.3.18. The vulnerability is exploitable remotely over mult...
CVE-2024-20954
CVE-2024-20954 affects Oracle GraalVM for JDK (versions 17.0.10, 21.0.2, 22) and Oracle GraalVM Enterprise Edition (20.3.13, 21.3.9) with the Compiler component. It allows an unauthenticated attacker with network access to read data from affected GraalVM instances. Exploitation requires network a...
CVE-2026-21925
CVE-2026-21925 is an Oracle Java SE/GraalVM vulnerability with multiple related CVEs (21925, 21932, 21933, 21945) affecting Java 8u471+, 11.0.29+, 17.0.17, 21.0.9, 25.0.1 across RMI, AWT/JavaFX, Networking and Security components. Connected advisories confirm it is present in OpenJDK/OpenJDK-base...
CVE-2026-21933
CVE-2026-21933 is reported across multiple Oracle/OpenJDK-based Java distributions (Amazon Corretto, Debian OpenJDK, etc.) affecting several components (Networking, RMI, Security) with varying CVSS metrics; affected products include Java SE/JDK including OpenJDK/OpenJDK-derived builds (e.g., 8u47...
CVE-2026-46917
The CVE-2026-46917 entry affects Oracle Java SE (components including JSSE) and Oracle GraalVM for JDK/Enterprise Edition. Affected Oracle Java SE versions: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnera...
CVE-2026-34282
Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition are affected (Networking component) with multiple supported versions listed. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or frequent crash (DOS) of the...
CVE-2023-22051
CVE-2023-22051 affects Oracle GraalVM Enterprise Edition (21.3.6, 22.3.2) and Oracle GraalVM for JDK (17.0.7, 20.0.1). The root cause is a vulnerability in the GraalVM Compiler that can be exploited by an unauthenticated, network-accessing attacker to read a subset of data. Impact is limited to u...
CVE-2026-21932
CVE-2026-21932 family overview (mode C): The issues affect multiple Oracle Java SE derivatives and OpenJDK-based runtimes (e.g., Oracle Java SE, GraalVM for JDK/Enterprise, Debian OpenJDK, Amazon Corretto, IBM Semeru Runtime). Affected components include RMI, AWT/JavaFX, Networking, and Security....