Every CVESearch/Get API key

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

9.1 CriticalPublic exploitFix available

CVE-2026-114820 is a critical vulnerability (CVSS 9.1) in Oracle Corporation Graalvm Enterprise Edition, published October 24, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in openjdk17 17.0.21.0.3_p1-r0.

Severity
9.1 CriticalCVSS 3.1, CVE List
Exploit chance
0.25%EPSS, 16th percentile
Exploitation
None known1 public exploit
Fixed in
17.0.21.0.3_p1-r0openjdk17 +299 more

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.25%Unchanged since Oct 25, 2026
90%50%10%1%

Discussion

Quiet in the last day.
14 days ago: 0 people13 days ago: 0 people12 days ago: 1 person11 days ago: 0 people10 days ago: 0 people9 days ago: 0 people8 days ago: 0 people7 days ago: 0 people6 days ago: 0 people5 days ago: 0 people4 days ago: 0 people3 days ago: 0 people2 days ago: 0 people1 day ago: 0 peopleLast 24 hours: 0 people

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk17
Alpine:v3.23
before 17.0.21.0.3_p1-r0
17.0.21.0.3_p1-r0
openjdk17
Alpine:v3.24
before 17.0.21.0.3_p1-r0
17.0.21.0.3_p1-r0
openjdk21
Alpine:v3.23
before 21.0.13.0.3_p1-r0
21.0.13.0.3_p1-r0
openjdk21
Alpine:v3.24
before 21.0.13.0.3_p1-r0
21.0.13.0.3_p1-r0
openjdk25
Alpine:v3.23
before 25.0.5.0.3_p1-r0
25.0.5.0.3_p1-r0
openjdk25
Alpine:v3.24
before 25.0.5.0.3_p1-r0
25.0.5.0.3_p1-r0
java-25-openjdk
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-crypto-adapter
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-crypto-adapter-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-crypto-adapter-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
java-25-openjdk-demo
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-demo-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-demo-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-devel
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-devel-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-devel-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-headless
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-headless-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-headless-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-javadoc
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-javadoc-zip
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-jmods
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-jmods-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-jmods-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-src
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-src-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-src-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-static-libs
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-static-libs-fastdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk-static-libs-slowdebug
AlmaLinux:10
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el10.alma.1
1:25.0.5.0.8-1.0.el10.alma.1
java-25-openjdk
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-crypto-adapter
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-crypto-adapter-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-crypto-adapter-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-demo
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-demo-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-demo-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-devel
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-devel-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-devel-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-headless
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-headless-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-headless-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-javadoc
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-javadoc-zip
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-jmods
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-jmods-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-jmods-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-src
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-src-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-src-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-static-libs
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-static-libs-fastdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-25-openjdk-static-libs-slowdebug
AlmaLinux:9
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-1.0.el9.alma.1
1:25.0.5.0.8-1.0.el9.alma.1
java-21-openjdk
AlmaLinux:8
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.1.el8
1:21.0.13.0.9-1.1.el8
java-21-openjdk
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-demo
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-demo-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-demo-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-devel
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-devel-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-devel-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-headless
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-headless-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-headless-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-javadoc
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-javadoc-zip
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-jmods
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-jmods-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-jmods-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-src
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-src-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-src-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-static-libs
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-static-libs-fastdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-21-openjdk-static-libs-slowdebug
AlmaLinux:9
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el9.alma.1
1:21.0.13.0.9-1.2.el9.alma.1
java-17-openjdk
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-demo
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-demo-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-demo-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-devel
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-devel-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-devel-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-headless
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-headless-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-headless-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-javadoc
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-javadoc-zip
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-jmods
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-jmods-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-jmods-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-src
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-src-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-src-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-static-libs
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-static-libs-fastdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk-static-libs-slowdebug
AlmaLinux:8
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.1.el8
1:17.0.21.0.9-2.1.el8
java-17-openjdk
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-demo
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-demo-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-demo-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-devel
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-devel-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-devel-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-headless
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-headless-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-headless-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-javadoc
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-javadoc-zip
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-jmods
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-jmods-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-jmods-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-src
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-src-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-src-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-static-libs
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-static-libs-fastdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-17-openjdk-static-libs-slowdebug
AlmaLinux:9
From an advisory covering 38 CVEs
before 1:17.0.21.0.9-2.2.el9.alma.1
1:17.0.21.0.9-2.2.el9.alma.1
java-21-openjdk
AlmaLinux:10
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el10.alma.1
1:21.0.13.0.9-1.2.el10.alma.1
java-21-openjdk-demo
AlmaLinux:10
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el10.alma.1
1:21.0.13.0.9-1.2.el10.alma.1
java-21-openjdk-demo-fastdebug
AlmaLinux:10
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el10.alma.1
1:21.0.13.0.9-1.2.el10.alma.1
java-21-openjdk-demo-slowdebug
AlmaLinux:10
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el10.alma.1
1:21.0.13.0.9-1.2.el10.alma.1
java-21-openjdk-devel
AlmaLinux:10
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.2.el10.alma.1
1:21.0.13.0.9-1.2.el10.alma.1
openjdk-nik-23-17
Alpaquita:23
23.0.4-r1 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
Alpaquita:23
23.1.3-r1 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
Alpaquita:23
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11
Alpaquita:23
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-container-jre
Alpaquita:23
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
Alpaquita:23
11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-perf
Alpaquita:23
11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0
11.0.33.0.3_p8-r0
openjdk17
Alpaquita:23
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-container-jre
Alpaquita:23
17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
Alpaquita:23
17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
Alpaquita:23
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21
Alpaquita:23
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-container-jre
Alpaquita:23
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
Alpaquita:23
21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
Alpaquita:23
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25
Alpaquita:23
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-container-jre
Alpaquita:23
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
Alpaquita:23
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27
Alpaquita:23
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-container-jre
Alpaquita:23
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
Alpaquita:23
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
Alpaquita:23
8u372_p7-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
Alpaquita:23
8u392_p9-r1 up to 8.513_p10-r0
8.513_p10-r0
openjdk-nik-23-17
Alpaquita:25
23.0.8-r0 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
Alpaquita:25
23.1.7-r0 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
Alpaquita:25
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11
Alpaquita:25
11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-container-jre
Alpaquita:25
11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
Alpaquita:25
11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-perf
Alpaquita:25
11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0
11.0.33.0.3_p8-r0
openjdk17
Alpaquita:25
17.0.15_p10-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-container-jre
Alpaquita:25
17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
Alpaquita:25
17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
Alpaquita:25
17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21
Alpaquita:25
21.0.7_p9-r1 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-container-jre
Alpaquita:25
21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
Alpaquita:25
21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
Alpaquita:25
21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25
Alpaquita:25
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-container-jre
Alpaquita:25
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
Alpaquita:25
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27
Alpaquita:25
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-container-jre
Alpaquita:25
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
Alpaquita:25
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
Alpaquita:25
8.452_p11-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
Alpaquita:25
8.472_p10-r0 up to 8.513_p10-r0
8.513_p10-r0
openjdk-nik-23-17
Alpaquita:stream
23.0.4-r1 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
Alpaquita:stream
23.1.3-r1 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
Alpaquita:stream
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11
Alpaquita:stream
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-container-jre
Alpaquita:stream
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
Alpaquita:stream
11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk17
Alpaquita:stream
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-container-jre
Alpaquita:stream
17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
Alpaquita:stream
17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
Alpaquita:stream
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21
Alpaquita:stream
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-container-jre
Alpaquita:stream
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
Alpaquita:stream
21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
Alpaquita:stream
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25
Alpaquita:stream
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-container-jre
Alpaquita:stream
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
Alpaquita:stream
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27
Alpaquita:stream
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-container-jre
Alpaquita:stream
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
Alpaquita:stream
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
Alpaquita:stream
8u372_p7-r1 up to 8.513_p9-r0
8.513_p9-r0
openjdk-nik-23-17
BellSoft Hardened Containers:23
23.0.4-r1 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
BellSoft Hardened Containers:23
23.1.3-r1 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
BellSoft Hardened Containers:23
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11-container-jre
BellSoft Hardened Containers:23
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
BellSoft Hardened Containers:23
11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-perf
BellSoft Hardened Containers:23
11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0
11.0.33.0.3_p8-r0
openjdk17-container-jre
BellSoft Hardened Containers:23
17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
BellSoft Hardened Containers:23
17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
BellSoft Hardened Containers:23
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21-container-jre
BellSoft Hardened Containers:23
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
BellSoft Hardened Containers:23
21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
BellSoft Hardened Containers:23
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25-container-jre
BellSoft Hardened Containers:23
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
BellSoft Hardened Containers:23
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27-container-jre
BellSoft Hardened Containers:23
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
BellSoft Hardened Containers:23
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
BellSoft Hardened Containers:23
8u372_p7-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
BellSoft Hardened Containers:23
8u392_p9-r1 up to 8.513_p10-r0
8.513_p10-r0
openjdk-nik-23-17
BellSoft Hardened Containers:25
23.0.8-r0 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
BellSoft Hardened Containers:25
23.1.7-r0 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
BellSoft Hardened Containers:25
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11-container-jre
BellSoft Hardened Containers:25
11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
BellSoft Hardened Containers:25
11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-perf
BellSoft Hardened Containers:25
11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0
11.0.33.0.3_p8-r0
openjdk17-container-jre
BellSoft Hardened Containers:25
17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
BellSoft Hardened Containers:25
17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
BellSoft Hardened Containers:25
17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21-container-jre
BellSoft Hardened Containers:25
21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
BellSoft Hardened Containers:25
21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
BellSoft Hardened Containers:25
21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25-container-jre
BellSoft Hardened Containers:25
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
BellSoft Hardened Containers:25
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27-container-jre
BellSoft Hardened Containers:25
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
BellSoft Hardened Containers:25
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
BellSoft Hardened Containers:25
8.452_p11-r0 up to 8.513_p9-r0
8.513_p9-r0
openjdk8-perf
BellSoft Hardened Containers:25
8.472_p10-r0 up to 8.513_p10-r0
8.513_p10-r0
openjdk-nik-23-17
BellSoft Hardened Containers:stream
23.0.4-r1 up to 23.0.14-r0
23.0.14-r0
openjdk-nik-23-21
BellSoft Hardened Containers:stream
23.1.3-r1 up to 23.1.13-r0
23.1.13-r0
openjdk-nik-25-25
BellSoft Hardened Containers:stream
25.0.0-r0 up to 25.0.5.0.3-r0
25.0.5.0.3-r0
openjdk11-container-jre
BellSoft Hardened Containers:stream
11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk11-lite
BellSoft Hardened Containers:stream
11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0
11.0.33.0.3_p7-r0
openjdk17-container-jre
BellSoft Hardened Containers:stream
17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk17-crac
BellSoft Hardened Containers:stream
17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0
17.0.21.0.3_p6-r0
openjdk17-lite
BellSoft Hardened Containers:stream
17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0
17.0.21.0.3_p5-r0
openjdk21-container-jre
BellSoft Hardened Containers:stream
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk21-crac
BellSoft Hardened Containers:stream
21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0
21.0.13.0.3_p6-r0
openjdk21-lite
BellSoft Hardened Containers:stream
21_p37-r0 up to 21.0.13.0.3_p5-r0
21.0.13.0.3_p5-r0
openjdk25-container-jre
BellSoft Hardened Containers:stream
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk25-lite
BellSoft Hardened Containers:stream
25_p37-r0 up to 25.0.5.0.3_p5-r0
25.0.5.0.3_p5-r0
openjdk27-container-jre
BellSoft Hardened Containers:stream
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk27-lite
BellSoft Hardened Containers:stream
27_p36-r0 up to 27.0.1.0.3_p5-r0
27.0.1.0.3_p5-r0
openjdk8
BellSoft Hardened Containers:stream
8u372_p7-r1 up to 8.513_p9-r0
8.513_p9-r0
openjdk-17
Debian:12
All versions, plus listed versions
17.0.10+7-117.0.10+7-1~deb11u117.0.10+7-1~deb12u117.0.10+7-217.0.10+7-3
Show 45 moreShow less
17.0.10~6ea-117.0.11+9-117.0.11+9-1~deb11u117.0.11+9-1~deb12u117.0.11~6ea-117.0.11~7ea-117.0.12+7-117.0.12+7-217.0.12+7-2~deb11u117.0.12+7-2~deb12u117.0.12~6ea-117.0.13+11-117.0.13+11-1~deb11u117.0.13+11-1~deb12u117.0.13+11-217.0.13+11-2~deb12u117.0.13~6ea-117.0.14+7-117.0.14+7-1~deb11u117.0.14+7-1~deb12u117.0.14~6ea-117.0.15+6-117.0.15+6-1~deb11u117.0.15+6-1~deb12u117.0.15~4ea-117.0.15~5ea-117.0.16+8-117.0.16+8-1~deb11u117.0.16+8-1~deb12u117.0.16~5ea-117.0.17+10-117.0.17+10-1~deb11u117.0.17+10-1~deb12u117.0.17~5ea-117.0.17~8ea-117.0.18+8-117.0.18+8-1~deb11u117.0.18+8-1~deb12u117.0.18~7ea-117.0.19+10-117.0.19+10-1~deb11u117.0.19+10-1~deb12u117.0.19+10-1~deb12u217.0.19~6ea-117.0.19~9ea-1
None known
openjdk-21
Debian:13
All versions, plus listed versions
21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1
Show 25 moreShow less
21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13.0.3+1-121.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1
None known
openjdk-21
Debian:14
before 21.0.13.0.3+1-1, plus listed versions
21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1
Show 24 moreShow less
21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1
21.0.13.0.3+1-1
openjdk-25
Debian:13
All versions, plus listed versions
25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3
Show 27 moreShow less
25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-125.0.5+8-1~deb13u125.0.5.0.3+1-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1
None known
openjdk-25
Debian:14
All versions, plus listed versions
25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3
Show 27 moreShow less
25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-125.0.5+8-1~deb13u125.0.5.0.3+1-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1
None known
openjdk-27
Debian:14
All versions, plus listed versions
27+35-127+35-227.0.1+9-127.0.1.0.2+1-127.0.1.0.3+1-1
Show 15 moreShow less
27~10ea-127~13ea-127~13ea-227~17ea-127~17ea-227~18ea-127~18ea-2~exp127~18ea-2~exp227~19ea-127~23ea-127~24ea-127~24ea-227~30ea-127~33ea-127~34ea-1
None known
java-21-openjdk-portable
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-devel
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-devel-fastdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-devel-slowdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-docs
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-fastdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-misc
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-slowdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-sources
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-static-libs
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-static-libs-fastdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-21-openjdk-portable-static-libs-slowdebug
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
before 1:21.0.13.0.9-1.0.1.hum1
1:21.0.13.0.9-1.0.1.hum1
java-25-openjdk-portable
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-devel
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-devel-fastdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-devel-slowdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-docs
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-fastdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-misc
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-slowdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-sources
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-static-libs
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-static-libs-fastdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-25-openjdk-portable-static-libs-slowdebug
Red Hat:hummingbird:1
From an advisory covering 41 CVEs
before 1:25.0.5.0.8-3.0.hum1
1:25.0.5.0.8-3.0.hum1
java-17-openjdk-portable
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-devel
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-devel-fastdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-devel-slowdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-docs
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-fastdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-misc
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-slowdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-sources
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-static-libs
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-static-libs-fastdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk-portable-static-libs-slowdebug
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
before 1:17.0.21.1.0-0.1.hum1
1:17.0.21.1.0-0.1.hum1
java-17-openjdk
openSUSE:Tumbleweed
before 17.0.21.0-2.1
17.0.21.0-2.1
java-21-openjdk
openSUSE:Tumbleweed
before 21.0.13.0-2.1
21.0.13.0-2.1
java-25-openjdk
openSUSE:Tumbleweed
before 25.0.5.0-2.1
25.0.5.0-2.1
java-11-openjdk
openSUSE:Tumbleweed
From an advisory covering 38 CVEs
before 11.0.33.0-1.1
11.0.33.0-1.1
java-21-openj9
openSUSE:Tumbleweed
From an advisory covering 20 CVEs
before 21.0.13.0-1.1
21.0.13.0-1.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 36 CVEs
before 1.8.0.512-1.1
1.8.0.512-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubjoedayz/cve-2026-114820-java-scan2026-10-24

What each source reports

CVE List Score used9.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
CVE-2026-114820
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-327
Updated
2026-11-02
EUVDEUVD-2026-1093149.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
EUVD-2026-109314
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-255q-pwv4-fjj79.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
GHSA-255q-pwv4-fjj7
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-327
Updated
2026-11-02
NVD9.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
CVE-2026-114820
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-327
Updated
2026-11-02
OSVALPINE-CVE-2026-1148209.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
ALPINE-CVE-2026-114820
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSVBELL-CVE-2026-1148209.1
Record
BELL-CVE-2026-114820
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-10
Show 15 moreShow less
OSVDEBIAN-CVE-2026-1148209.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Record
DEBIAN-CVE-2026-114820
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-09
OSVRHSA-2026:940698.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:94069
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:941118.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:94111
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:958338.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:95833
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVALSA-2026:88347No score

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Improve C2 loop transformations (CVE-2026-83378)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance Vector Processing (CVE-2026-87255)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance HTTP Server (CVE-2026-87291)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Improve ciphertext handling (CVE-2026-91333)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record
ALSA-2026:88347
Updated
2026-11-02
OSVALSA-2026:88349No score

Important: java-21-openjdk security update for AlmaLinux 8 and 9

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Improve C2 loop transformations (CVE-2026-83378)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance HTTP Server (CVE-2026-87291)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Improve ciphertext handling (CVE-2026-91333)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record
ALSA-2026:88349
Updated
2026-11-02
OSVALSA-2026:88352No score

Important: java-17-openjdk security update for AlmaLinux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance Image Processing (CVE-2026-91382)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record
ALSA-2026:88352
Updated
2026-11-02
OSVALSA-2026:90500No score

Important: java-17-openjdk security update for AlmaLinux 9

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance Image Processing (CVE-2026-91382)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record
ALSA-2026:90500
Updated
2026-11-02
OSVALSA-2026:90504No score

Important: java-21-openjdk security update for AlmaLinux 10

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance PKCS5 padding (CVE-2026-83374)
  • JDK: Enhance TLS certificate handling (CVE-2026-83376)
  • JDK: Improve C2 loop transformations (CVE-2026-83378)
  • JDK: Enhance LDAP logins (CVE-2026-83380)
  • JDK: Enhance SASL Authentication (CVE-2026-83381)
  • JDK: Enhance WebRowSets (CVE-2026-83387)
  • JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
  • JDK: Enhance XML Processing (CVE-2026-83400)
  • JDK: Enhance XPath Expressions (CVE-2026-87290)
  • JDK: Enhance HTTP Server (CVE-2026-87291)
  • JDK: Enhance Network Clients (CVE-2026-87292)
  • JDK: Enhance Certificate Name Checks (CVE-2026-87294)
  • JDK: Enhance Template Handling (CVE-2026-87367)
  • JDK: Enhance HTTP Client (CVE-2026-91332)
  • JDK: Improve ciphertext handling (CVE-2026-91333)
  • JDK: Enhance JPEG loading (CVE-2026-91334)
  • JDK: Enhance Image Handling (CVE-2026-91335)
  • JDK: Enhance TLS handshakes (CVE-2026-91373)
  • JDK: Enhance jstatd (CVE-2026-91374)
  • JDK: Enhance jmod handling (CVE-2026-91375)
  • JDK: Enhance JShell (CVE-2026-91379)
  • JDK: Enhance Preferences (CVE-2026-91380)
  • JDK: Enhance HTTP client caching (CVE-2026-91394)
  • JDK: Enhance diagnostic sessions (CVE-2026-91397)
  • JDK: Enhance SOCKS5 support (CVE-2026-91398)
  • JDK: Enhance MIDI file handling (CVE-2026-91400)
  • JDK: Enhance zipfs (CVE-2026-91410)
  • JDK: Enhance font rendering (CVE-2026-91415)
  • JDK: Enhance GIF loading (CVE-2026-91418)
  • JDK: Enhance HTTP server parsing (CVE-2026-91451)
  • JDK: Enhance HTTP server (CVE-2026-91452)
  • JDK: Improve HTTP headers (CVE-2026-91453)
  • JDK: Enhance TLS Extensions (CVE-2026-91461)
  • JDK: Enhance krb5 tokens (CVE-2026-91462)
  • JDK: Enhance krb5 client (CVE-2026-91463)
  • JDK: Enhance Kerberos validation (CVE-2026-91464)
  • JDK: Enhance C2 comparisons (CVE-2026-91487)
  • JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record
ALSA-2026:90504
Updated
2026-11-02
OSVopenSUSE-SU-2026:12343-1No score

java-17-openjdk-17.0.21.0-2.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.21.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12343-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12344-1No score

java-21-openjdk-21.0.13.0-2.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.13.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12344-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12345-1No score

java-25-openjdk-25.0.5.0-2.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.5.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12345-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12418-1No score

java-11-openjdk-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12418-1
Updated
2026-11-05
OSVopenSUSE-SU-2026:12435-1No score

java-21-openj9-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12435-1
Updated
2026-11-06
OSVopenSUSE-SU-2026:12513-1No score

java-1_8_0-openjdk-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12513-1
Updated
2026-11-11

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected
affected, aliases, facts, referencesOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 18 package rows, 33 versions and 80 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open