CVE-2026-101737
CVE-2026-101737
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Vulnerability in Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVSS 5.9 · Medium · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
oracle java se
- Versions
- 26.0.2: Affected
No fix published
openjdk-26 Debian:14
- Versions
- 26+35-1
- 26+35-2
- 26+35-3
- 26.0.1+8-1
- 26.0.1+8-2
- 26.0.1+8-3
- 26.0.1+8-4
- 26.0.2+10-1
- 26.0.2+10-2
- 26.0.2+10-3
- 26.0.2.1+1-1
- 26~12ea-1
- 26~17ea-1
- 26~21ea-1
- 26~22ea-1
- 26~22ea-2
- 26~26ea-1
- 26~28ea-1
- 26~30ea-1
- 26~32ea-1
- 26~34ea-1
- 26~35ea-1
- 26~9ea-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-27 Debian:14
- Versions
- 27+35-1
- 27+35-2
- 27.0.1+9-1
- 27.0.1.0.2+1-1
- 27~10ea-1
- 27~13ea-1
- 27~13ea-2
- 27~17ea-1
- 27~17ea-2
- 27~18ea-1
- 27~18ea-2~exp1
- 27~18ea-2~exp2
- 27~19ea-1
- 27~23ea-1
- 27~24ea-1
- 27~24ea-2
- 27~30ea-1
- 27~33ea-1
- 27~34ea-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-27 Ubuntu:26.10
- Versions
- 27~19ea-1
- 27~34ea-1
- 27+35-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-26 Ubuntu:26.04:LTS
- Versions
- 26~17ea-1
- 26~26ea-1
- 26~28ea-1
- 26~30ea-1
- 26~32ea-1
- 26~34ea-1
- 26.0.1+8-2~26.04.2
- 26.0.2+10-2~26.04.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published