{"id":"CVE-2026-91417","aliases":["ALPINE-CVE-2026-91417","BELL-CVE-2026-91417","EUVD-2026-106668","GHSA-23j9-f78g-rw77","UBUNTU-CVE-2026-91417","USN-9009-1","openSUSE-SU-2026:12513-1"],"status":"published","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00306,"percentile":0.23736,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-10-20T21:25:51Z","modified":"2026-11-11T17:23:11Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"openjdk17","fixed_in":["17.0.21.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk17","fixed_in":["17.0.21.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk21","fixed_in":["21.0.13.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk21","fixed_in":["21.0.13.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2","11.0.32+9-1ubuntu1~18.04","11.0.32.1+1-1ubuntu1~18.04","11.0.33+9-1ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04","17.0.16+8~us1-0ubuntu1~18.04.1","17.0.17+10-1~18.04","17.0.18+8-1~18.04","17.0.19+10-1~18.04.2","17.0.20+8-1~18.04","17.0.20.1+1-1~18.04","17.0.21.0.3+1-1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~18.04.1"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2","11.0.32+9-1ubuntu1~20.04","11.0.32.1+1-1ubuntu1~20.04","11.0.33+9-1ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04","17.0.16+8~us1-0ubuntu1~20.04.6","17.0.17+10-1~20.04","17.0.18+8-1~20.04","17.0.19+10-1~20.04.2","17.0.20+8-1~20.04","17.0.20.1+1-1~20.04","17.0.21.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2","21.0.12+8-1~20.04","21.0.12.1+1-1~20.04.4","21.0.13.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~20.04.1"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04","17.0.16+8~us1-0ubuntu1~22.04.1","17.0.17+10-1~22.04","17.0.18+8-1~22.04.1","17.0.19+10-1~22.04.2","17.0.20+8-1~22.04","17.0.20.1+1-1~22.04","17.0.21.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04","21.0.8+9~us1-0ubuntu1~22.04.1","21.0.9+10-1~22.04","21.0.10+7-1~22.04","21.0.11+10-1~22.04.2","21.0.12+8-1~22.04","21.0.12.1+1-1~22.04.4","21.0.13.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04","25.0.4.1+1-1~22.04.4","25.0.5.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~22.04.1"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2","11.0.32+9-1ubuntu1~22.04","11.0.32.1+1-1ubuntu1~22.04","11.0.33+9-1ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04","17.0.16+8~us1-0ubuntu1~24.04.1","17.0.17+10-1~24.04","17.0.18+8-1~24.04.1","17.0.19+10-1~24.04.2","17.0.20+8-1~24.04","17.0.20.1+1-1~24.04","17.0.21.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04","21.0.8+9~us1-0ubuntu1~24.04.1","21.0.9+10-1~24.04","21.0.10+7-1~24.04","21.0.11+10-1~24.04.2","21.0.12+8-1~24.04","21.0.12.1+1-1~24.04.4","21.0.13.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04","25.0.4.1+1-1~24.04.4","25.0.5.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~24.04.1"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2","11.0.32+9-1ubuntu1~24.04","11.0.32.1+1-1ubuntu1~24.04","11.0.33+9-1ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-1","17.0.19+10-1","17.0.20~5ea-1","17.0.20+8-1","17.0.20.1+1-1","17.0.21~6ea-1","17.0.21.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1","17.0.20+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.11~8ea-1","21.0.11+10-1","21.0.12~5ea-1","21.0.12+8-1","21.0.12.1+1-1","21.0.13.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1","21.0.12+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1","25.0.4.1+1-1","25.0.5.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.10.1"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu2","11.0.32+9-1ubuntu1","11.0.32.1+1-1ubuntu1","11.0.32.1+1-1ubuntu2","11.0.33+9-1ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.17~8ea-1","17.0.17+10-1","17.0.18~7ea-1","17.0.18+8-1","17.0.19+10-1~26.04.2","17.0.20+8-1~26.04","17.0.20.1+1-1~26.04","17.0.21.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.16+8-0ubuntu1","17.0.17+10-0ubuntu1","17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1~26.04.1","17.0.20+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.9~8ea-1","21.0.9+10-1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.10+7-1","21.0.11~5ea-1","21.0.11~8ea-1","21.0.11+10-1~26.04.2","21.0.12+8-1~26.04","21.0.12.1+1-1~26.04.4","21.0.13.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.8+9-0ubuntu1","21.0.9+10-0ubuntu1","21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1~26.04.1","21.0.12+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04","25.0.4.1+1-1~26.04.4","25.0.5.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.04.1"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2","11.0.32+9-1ubuntu1~26.04","11.0.32.1+1-1ubuntu1~26.04","11.0.33+9-1ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~18.04.1"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~20.04.1"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~22.04.1"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~24.04.1"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.10.1"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.04.1"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3"],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.512-1.1"}]}],"bundled":36}],"products":[{"vendor":"oracle corporation","product":"oracle graalvm enterprise edition"},{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417"},{"url":"https://github.com/advisories/GHSA-23j9-f78g-rw77"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-91417","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-91417","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-91417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91417","tags":["report"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-20","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-9009-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-83374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91464","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-101516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-114820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91464","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-20T21:25:51.341Z","modified":"2026-10-22T18:50:23.419Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:19:52.773089Z"}],"euvd":[{"id":"EUVD-2026-106668","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-20T21:25:51Z","modified":"2026-10-22T18:50:23Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:59:34.378575Z"}],"ghsa":[{"id":"GHSA-23j9-f78g-rw77","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-21T00:33:29Z","modified":"2026-10-22T21:32:34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:14:17.600276Z"}],"nvd":[{"id":"CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-20T22:20:45.067Z","modified":"2026-10-22T19:18:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:13:02.045979Z"}],"osv":[{"id":"ALPINE-CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-20T22:20:45.067Z","modified":"2026-11-03T06:32:57.222922133Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2026-91417","status":"published","published":"2026-10-22T06:12:00.915978Z","modified":"2026-10-31T07:15:07.024340621Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:27.164451Z"},{"id":"UBUNTU-CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-10-20T22:20:00Z","modified":"2026-11-10T02:52:14.693162901Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-10T03:20:58.564844Z"},{"id":"openSUSE-SU-2026:12513-1","title":"java-1_8_0-openjdk-1.8.0.512-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-10T00:00:00Z","modified":"2026-11-11T17:23:11.718873967Z","updated_at":"2026-11-11T17:47:15.466074Z"},{"id":"USN-9009-1","title":"openjdk-8 vulnerabilities","description":"It was discovered that the Security component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the JAAS component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the Security component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JDBC component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91451, CVE-2026-91452)\n\nIt was discovered that the RMI component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read or\nmodify sensitive data. (CVE-2026-87293)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the ImageIO component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91334)\n\nIt was discovered that the AWT component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the Serviceability component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Utility component of OpenJDK 8 did not correctly\nauthorize users. A local attacker could possibly use this issue to read or\nmodify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-91381)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the Utility component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service or to modify sensitive data. (CVE-2026-91395,\nCVE-2026-91396)\n\nIt was discovered that the Serviceability component of OpenJDK 8 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the Sound component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIt was discovered that the Libraries component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the CORBA component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91417)\n\nIt was discovered that the ImageIO component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91418)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 8\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Security component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read or modify sensitive data. (CVE-2026-114820)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T16:04:44Z","modified":"2026-11-10T02:58:35.574310504Z","updated_at":"2026-11-10T03:21:46.325253Z"}]}}