Oracle Java SE vulnerabilities

16 known vulnerabilities in Oracle Java SE from Oracle. 16 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

16vulnerabilities

2critical

14high

0exploited

7.7average CVSS score

Latest first

9.1 Critical severity
Oracle Java SE: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-114820Oct 24, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.
9.1 Critical severity
Oracle Java SE: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-91403Oct 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; O
7.5 High severity
Oracle Java SE: Improper Access Control
CVE-2026-91484Oct 20, 2026Oracle
Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE exe
7.0 High severity
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition…
CVE-2026-91415Oct 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-70906Aug 18, 2026Oracle
Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java S
7.8 High severity
Oracle Java SE: Improper Access Control
CVE-2026-62574Jul 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle Gra
7.5 High severity
Oracle Java SE: Improper Access Control
CVE-2026-47063Jul 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0
7.4 High severity
Oracle Java SE: Deserialization of Untrusted Data
CVE-2026-47058Jul 21, 2026Oracle
Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-47057Jul 21, 2026Oracle
Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compr
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-34282Apr 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle
7.5 High severity
Oracle Java SE: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-22016Apr 21, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2
7.5 High severity
Oracle Java SE: Uncontrolled Resource Consumption
CVE-2026-21945Jan 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.
7.4 High severity
Oracle Java SE: Improper Validation of Specified Type of Input
CVE-2026-21932Jan 20, 2026Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9,
7.5 High severity
Oracle Java SE: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2025-53066Oct 21, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM
8.6 High severity
Oracle Java SE: Improper Access Control
CVE-2025-50059Jul 15, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle Graa
7.4 High severity
Oracle Java SE: Improper Access Control
CVE-2025-21587Apr 15, 2025Oracle
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM