Oracle GraalVM Enterprise Edition vulnerabilities

12 known vulnerabilities in Oracle GraalVM Enterprise Edition from Oracle. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

12vulnerabilities

2critical

10high

0exploited

7.8average CVSS score

Latest first

9.1 Critical severity
Oracle Java SE: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-114820Oct 24, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.
9.1 Critical severity
Oracle Java SE: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-91403Oct 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; O
7.0 High severity
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition…
CVE-2026-91415Oct 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;
7.8 High severity
Oracle Java SE: Improper Access Control
CVE-2026-62574Jul 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle Gra
7.5 High severity
Oracle Java SE: Improper Access Control
CVE-2026-47063Jul 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-34282Apr 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle
7.5 High severity
Oracle Java SE: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-22016Apr 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-21945Jan 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.
7.4 High severity
Oracle Java SE: Improper Validation of Specified Type of Input
CVE-2026-21932Jan 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9,
7.5 High severity
Oracle Java SE: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2025-53066Oct 21, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM
8.6 High severity
Oracle Java SE: Improper Access Control
CVE-2025-50059Jul 15, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle Graa
7.4 High severity
Oracle Java SE: Improper Access Control
CVE-2025-21587Apr 15, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM