p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 110

Vulnerabilities published for Operating systems in the last 30 days: 6454. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 160467

  1. CVE-2026-91418

    Medium · CVSS 5.3EPSS 0.4%Fix available

    CVE-2026-91418

    Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of

    oracle java se oracle javafx oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9Operating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2026-91417

    Medium · CVSS 5.3EPSS 0.31%No fix published

    CVE-2026-91417

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by

    oracle java se oracle graalvm enterprise edition openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-lts openjdk-13 openjdk-16 openjdk-17 openjdk-21Operating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  3. CVE-2026-91415

    High · CVSS 7EPSS 0.24%Fix available

    CVE-2026-91415

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a han

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  4. CVE-2026-91411

    Medium · CVSS 6.5EPSS 0.27%Fix available

    CVE-2026-91411

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable cr

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  5. CVE-2026-91410

    Medium · CVSS 5.3EPSS 0.31%Fix available

    CVE-2026-91410

    Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., t

    oracle java se openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  6. CVE-2026-91409

    Low · CVSS 3.7EPSS 0.38%No fix published

    CVE-2026-91409

    Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java

    oracle java se openjdk-27 openjdk-27Operating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  7. CVE-2026-91402

    Low · CVSS 3.1EPSS 0.24%No fix published

    CVE-2026-91402

    Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a sub

    oracle java se oracle javafx oracle graalvm enterprise edition openjfx openjfx openjfx openjfx openjfx openjfx openjfx openjfxOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  8. CVE-2026-91400

    Low · CVSS 3.1EPSS 0.26%Fix available

    CVE-2026-91400

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Suc

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  9. CVE-2026-91398

    Medium · CVSS 6.8EPSS 0.23%Fix available

    CVE-2026-91398

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOCKS5 to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  10. CVE-2026-91397

    Low · CVSS 3.6EPSS 0.1%Fix available

    CVE-2026-91397

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  11. CVE-2026-91396

    Medium · CVSS 6.5EPSS 0.33%No fix published

    CVE-2026-91396

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-ltsOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  12. CVE-2026-91395

    Medium · CVSS 6.5EPSS 0.25%No fix published

    CVE-2026-91395

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-ltsOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  13. CVE-2026-91394

    Medium · CVSS 5.9EPSS 0.42%Fix available

    CVE-2026-91394

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by

    oracle java se oracle graalvm for jdk openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-lts openjdk-17Operating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  14. CVE-2026-91385

    Medium · CVSS 5.4EPSS 0.18%No fix published

    CVE-2026-91385

    Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or del

    oracle java se oracle javafx oracle graalvm enterprise edition openjfx openjfx openjfx openjfx openjfx openjfx openjfx openjfxOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  15. CVE-2026-91382

    Medium · CVSS 6.5EPSS 0.38%Fix available

    CVE-2026-91382

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  16. CVE-2026-91381

    Low · CVSS 3.7EPSS 0.23%No fix published

    CVE-2026-91381

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using A

    oracle java se oracle graalvm enterprise edition openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8 openjdk-lts openjdk-13 openjdk-16 openjdk-17 openjdk-21Operating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  17. CVE-2026-91380

    Medium · CVSS 4EPSS 0.1%Fix available

    CVE-2026-91380

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Succes

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  18. CVE-2026-91379

    Medium · CVSS 4.7EPSS 0.12%Fix available

    CVE-2026-91379

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  19. CVE-2026-91375

    Medium · CVSS 4.7EPSS 0.09%Fix available

    CVE-2026-91375

    Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all

    oracle java se openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-lts openjdk-17 openjdk-8Operating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  20. CVE-2026-91374

    Medium · CVSS 4.8EPSS 0.17%Fix available

    CVE-2026-91374

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, i

    oracle java se oracle graalvm for jdk oracle graalvm enterprise edition openjdk-17 openjdk-21 openjdk-21 openjdk-25 openjdk-25 openjdk-27 openjdk-8 openjdk-9 openjdk-ltsOperating systems
    • Update to 17.0.21+9-1~deb12u1
    • Update to 21.0.13+9-1
    • Update to 21.0.13+9-1~deb13u2
    • Update to 25.0.5+8-1
    • Update to 25.0.5+8-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →