p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de openjdk-25 · Page n° 2

Vulnérabilités publiées pour openjdk-25 au cours des 30 derniers jours : 41. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 69

  1. CVE-2026-91374

    Moyenne · CVSS 4.8EPSS 0,17%Correctif disponible

    CVE-2026-91374

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, i

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  2. CVE-2026-91373

    Moyenne · CVSS 5.3EPSS 0,44%Correctif disponible

    CVE-2026-91373

    Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  3. CVE-2026-91335

    Faible · CVSS 2.6EPSS 0,21%Correctif disponible

    CVE-2026-91335

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Succes

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  4. CVE-2026-91334

    Faible · CVSS 3.7EPSS 0,21%Correctif disponible

    CVE-2026-91334

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  5. CVE-2026-91333

    Faible · CVSS 3.7EPSS 0,27%Correctif disponible

    CVE-2026-91333

    Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients runn

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  6. CVE-2026-91332

    Moyenne · CVSS 5.3EPSS 0,29%Correctif disponible

    CVE-2026-91332

    Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., throu

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  7. CVE-2026-87367

    Faible · CVSS 3.7EPSS 0,25%Correctif disponible

    CVE-2026-87367

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or d

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  8. CVE-2026-87294

    Moyenne · CVSS 6.5EPSS 0,26%Correctif disponible

    CVE-2026-87294

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, inse

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  9. CVE-2026-87292

    Faible · CVSS 3.7EPSS 0,24%Correctif disponible

    CVE-2026-87292

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, inser

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  10. CVE-2026-87291

    Moyenne · CVSS 5.3EPSS 0,31%Correctif disponible

    CVE-2026-87291

    Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Conf

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  11. CVE-2026-87290

    Moyenne · CVSS 5.9EPSS 0,33%Correctif disponible

    CVE-2026-87290

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  12. CVE-2026-87255

    Faible · CVSS 3.7EPSS 0,31%Correctif disponible

    CVE-2026-87255

    Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  13. CVE-2026-83400

    Moyenne · CVSS 5.3EPSS 0,4%Correctif disponible

    CVE-2026-83400

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  14. CVE-2026-83395

    Moyenne · CVSS 6.5EPSS 0,33%Correctif disponible

    CVE-2026-83395

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  15. CVE-2026-83387

    Moyenne · CVSS 5.9EPSS 0,33%Correctif disponible

    CVE-2026-83387

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to crit

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  16. CVE-2026-83381

    Moyenne · CVSS 4.8EPSS 0,23%Correctif disponible

    CVE-2026-83381

    Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note:

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  17. CVE-2026-83380

    Moyenne · CVSS 5.3EPSS 0,33%Correctif disponible

    CVE-2026-83380

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  18. CVE-2026-83378

    Moyenne · CVSS 4.8EPSS 0,21%Correctif disponible

    CVE-2026-83378

    Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start a

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  19. CVE-2026-83376

    Faible · CVSS 3.7EPSS 0,25%Correctif disponible

    CVE-2026-83376

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  20. CVE-2026-83374

    Moyenne · CVSS 5.9EPSS 0,29%Correctif disponible

    CVE-2026-83374

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation,

    openjdk-25Systèmes d’exploitation
    • Mettez à jour vers 25.0.5+8-1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →