Every CVESearch/Get API key

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

5.3 MediumFix available

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.31%Unchanged since Oct 21, 2026
90%50%10%1%

What each source reports

CVE List Score used5.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
CVE-2026-91417
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2026-1066685.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
EUVD-2026-106668
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-23j9-f78g-rw775.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
GHSA-23j9-f78g-rw77
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
NVD5.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
CVE-2026-91417
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
OSVALPINE-CVE-2026-914175.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
ALPINE-CVE-2026-91417
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
OSVBELL-CVE-2026-914175.3
Record
BELL-CVE-2026-91417
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-914175.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
UBUNTU-CVE-2026-91417
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-10
OSVopenSUSE-SU-2026:12513-1No score

java-1_8_0-openjdk-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12513-1
Updated
2026-11-11
OSVUSN-9009-1No score

openjdk-8 vulnerabilities

It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461)

It was discovered that the JAAS component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JDBC component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91451, CVE-2026-91452)

It was discovered that the RMI component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87293)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91381)

It was discovered that the 2D component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91395, CVE-2026-91396)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91397)

It was discovered that the Networking component of OpenJDK 8 did not…

Record
USN-9009-1
Updated
2026-11-10

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk17
Alpine:v3.23
before 17.0.21.0.3_p1-r0
17.0.21.0.3_p1-r0
openjdk17
Alpine:v3.24
before 17.0.21.0.3_p1-r0
17.0.21.0.3_p1-r0
openjdk21
Alpine:v3.23
before 21.0.13.0.3_p1-r0
21.0.13.0.3_p1-r0
openjdk21
Alpine:v3.24
before 21.0.13.0.3_p1-r0
21.0.13.0.3_p1-r0
openjdk8
Alpaquita:23
8u372_p7-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
Alpaquita:23
8u392_p9-r1 up to 8.513_p10-r0
8.513_p10-r0
openjdk8
Alpaquita:25
8.452_p11-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
Alpaquita:25
8.472_p10-r0 up to 8.513_p10-r0
8.513_p10-r0
openjdk8
Alpaquita:stream
8u372_p7-r1 up to 8.513_p9-r0
8.513_p9-r0
openjdk8
BellSoft Hardened Containers:23
8u372_p7-r0 up to 8.513_p9-r0
8.513_p9-r0
Show 48 moreShow less
Affected packages
PackageAffectedFixed
openjdk8-perf
BellSoft Hardened Containers:23
8u392_p9-r1 up to 8.513_p10-r0
8.513_p10-r0
openjdk8
BellSoft Hardened Containers:25
8.452_p11-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
BellSoft Hardened Containers:25
8.472_p10-r0 up to 8.513_p10-r0
8.513_p10-r0
openjdk8
BellSoft Hardened Containers:stream
8u372_p7-r1 up to 8.513_p9-r0
8.513_p9-r0
openjdk-8
Ubuntu:Pro:16.04:LTS
before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 45 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1
8u512-b09~us1-0ubuntu1~16.04.1
openjdk-9
Ubuntu:16.04:LTS
All versions, plus listed versions
9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1
None known
openjdk-lts
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2
Show 39 moreShow less
10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.0411.0.33+9-1ubuntu1~18.04.1
None known
openjdk-17
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04
Show 18 moreShow less
17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.0417.0.21.0.3+1-1~18.04.1
None known
openjdk-8
Ubuntu:Pro:18.04:LTS
before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions
8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1
Show 32 moreShow less
8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3
8u512-b09~us1-0ubuntu1~18.04.1
openjdk-lts
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1
Show 31 moreShow less
11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.0411.0.33+9-1ubuntu1~20.04.1
None known
openjdk-13
Ubuntu:20.04:LTS
All versions, plus listed versions
13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04
None known
openjdk-16
Ubuntu:20.04:LTS
All versions, plus listed versions
16.0.1+9-1~20.04
None known
openjdk-17
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04
Show 19 moreShow less
17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.0417.0.21.0.3+1-1~20.04.1
None known
openjdk-21
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04
Show 9 moreShow less
21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.421.0.13.0.3+1-1~20.04.1
None known
openjdk-8
Ubuntu:Pro:20.04:LTS
before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions
8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1
Show 25 moreShow less
8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3
8u512-b09~us1-0ubuntu1~20.04.1
openjdk-17
Ubuntu:22.04:LTS
All versions, plus listed versions
17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04
Show 19 moreShow less
17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.0417.0.21.0.3+1-1~22.04.1
None known
openjdk-18
Ubuntu:22.04:LTS
All versions, plus listed versions
18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04
None known
openjdk-21
Ubuntu:22.04:LTS
All versions, plus listed versions
21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04
Show 9 moreShow less
21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.421.0.13.0.3+1-1~22.04.1
None known
openjdk-25
Ubuntu:22.04:LTS
All versions, plus listed versions
25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.425.0.5.0.3+1-1~22.04.1
None known
openjdk-8
Ubuntu:22.04:LTS
before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions
8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04
Show 15 moreShow less
8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3
8u512-b09~us1-0ubuntu1~22.04.1
openjdk-lts
Ubuntu:22.04:LTS
All versions, plus listed versions
11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1
Show 20 moreShow less
11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.0411.0.33+9-1ubuntu1~22.04.1
None known
openjdk-17
Ubuntu:24.04:LTS
All versions, plus listed versions
17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1
Show 14 moreShow less
17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.0417.0.21.0.3+1-1~24.04.1
None known
openjdk-21
Ubuntu:24.04:LTS
All versions, plus listed versions
21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2
Show 16 moreShow less
21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.421.0.13.0.3+1-1~24.04.1
None known
openjdk-25
Ubuntu:24.04:LTS
All versions, plus listed versions
25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.425.0.5.0.3+1-1~24.04.1
None known
openjdk-8
Ubuntu:24.04:LTS
before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions
8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1
Show 14 moreShow less
8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3
8u512-b09~us1-0ubuntu1~24.04.1
openjdk-lts
Ubuntu:Pro:24.04:LTS
All versions, plus listed versions
11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2
Show 12 moreShow less
11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.0411.0.33+9-1ubuntu1~24.04.1
None known
openjdk-17
Ubuntu:26.10
All versions, plus listed versions
17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-117.0.21.0.3+1-1~26.10.1
None known
openjdk-17-crac
Ubuntu:26.10
All versions, plus listed versions
17.0.18+8-0ubuntu117.0.19+10-0ubuntu117.0.20+8-0ubuntu1
None known
openjdk-21
Ubuntu:26.10
All versions, plus listed versions
21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-121.0.13.0.3+1-1~26.10.1
None known
openjdk-21-crac
Ubuntu:26.10
All versions, plus listed versions
21.0.10+7-0ubuntu121.0.11+10-0ubuntu121.0.12+8-0ubuntu1
None known
openjdk-25
Ubuntu:26.10
All versions, plus listed versions
25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-125.0.5.0.3+1-1~26.10.1
None known
openjdk-8
Ubuntu:26.10
before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions
8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1
8u512-b09~us1-0ubuntu1~26.10.1
openjdk-lts
Ubuntu:26.10
All versions, plus listed versions
11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu211.0.33+9-1ubuntu1~26.10.1
None known
openjdk-17
Ubuntu:26.04:LTS
All versions, plus listed versions
17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.0417.0.21.0.3+1-1~26.04.1
None known
openjdk-17-crac
Ubuntu:26.04:LTS
All versions, plus listed versions
17.0.16+8-0ubuntu117.0.17+10-0ubuntu117.0.18+8-0ubuntu117.0.19+10-0ubuntu1~26.04.117.0.20+8-0ubuntu1~26.04
None known
openjdk-21
Ubuntu:26.04:LTS
All versions, plus listed versions
21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1
Show 6 moreShow less
21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.421.0.13.0.3+1-1~26.04.1
None known
openjdk-21-crac
Ubuntu:26.04:LTS
All versions, plus listed versions
21.0.8+9-0ubuntu121.0.9+10-0ubuntu121.0.10+7-0ubuntu121.0.11+10-0ubuntu1~26.04.121.0.12+8-0ubuntu1~26.04
None known
openjdk-25
Ubuntu:26.04:LTS
All versions, plus listed versions
25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1
Show 6 moreShow less
25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.425.0.5.0.3+1-1~26.04.1
None known
openjdk-8
Ubuntu:26.04:LTS
before 8u512-b09~us1-0ubuntu1~26.04.1, plus listed versions
8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3
8u512-b09~us1-0ubuntu1~26.04.1
openjdk-lts
Ubuntu:26.04:LTS
All versions, plus listed versions
11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.0411.0.33+9-1ubuntu1~26.04.1
None known
openjdk-8
Ubuntu:Pro:16.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 45 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1
8u512-b09~us1-0ubuntu1~16.04.1
openjdk-8
Ubuntu:Pro:18.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions
8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1
Show 32 moreShow less
8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3
8u512-b09~us1-0ubuntu1~18.04.1
openjdk-8
Ubuntu:Pro:20.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions
8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1
Show 25 moreShow less
8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3
8u512-b09~us1-0ubuntu1~20.04.1
openjdk-8
Ubuntu:22.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions
8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04
Show 15 moreShow less
8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3
8u512-b09~us1-0ubuntu1~22.04.1
openjdk-8
Ubuntu:24.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions
8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1
Show 14 moreShow less
8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3
8u512-b09~us1-0ubuntu1~24.04.1
openjdk-8
Ubuntu:26.10
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions
8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1
8u512-b09~us1-0ubuntu1~26.10.1
openjdk-8
Ubuntu:26.04:LTS
From an advisory covering 37 CVEs
before 8u512-b09~us1-0ubuntu1~26.04.1, plus listed versions
8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3
8u512-b09~us1-0ubuntu1~26.04.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 36 CVEs
before 1.8.0.512-1.1
1.8.0.512-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affectedOSV
affected, factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-91417 is a medium vulnerability (CVSS 5.3) in Oracle Corporation Graalvm Enterprise Edition, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in openjdk17 17.0.21.0.3_p1-r0.

References

Show 75 moreShow less
This page doesn't list everything

Left out here: 4 versions and the rest of 1 source description. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open