Advisories · Technology

Eclipse Foundation Eclipse OpenJ9.

Every CVE that names Eclipse Foundation Eclipse OpenJ9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110938 CVE record

CVSS 8.7 High

JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing
- Eclipse Foundation Eclipse OpenJ9
- Memory corruption
- CWE-20
Not analysed yet 21 Oct 2026
CVE-2026-111075 CVE record

CVSS 8.7 High

JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
- Eclipse Foundation Eclipse OpenJ9
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-111074 CVE record

CVSS 8.7 High

JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()
- Eclipse Foundation Eclipse OpenJ9
- Memory corruption
- Denial of service
Not analysed yet 21 Oct 2026
CVE-2026-97400 CVE record

CVSS 6.8 Medium

jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)
- Eclipse Foundation Eclipse OpenJ9
- XML external entities (XXE)
- CWE-618
Not analysed yet 20 Oct 2026
CVE-2026-16440 CVE record

CVSS 5.7 Medium

Uncontrolled recursion in Eclipse Foundation Eclipse OpenJ9
- Eclipse Foundation Eclipse OpenJ9
- Denial of service
Not analysed yet 19 Aug 2026
CVE-2026-6918 CVE record

CVSS 8.7 High

Out-of-bounds read in Eclipse Foundation Eclipse OpenJ9
- Eclipse Foundation Eclipse OpenJ9
- Memory corruption
- CWE-1286
Not analysed yet 5 May 2026
CVE-2023-2597 CVE record

CVSS 7.0 High

Buffer overflow in Eclipse Foundation Eclipse OpenJ9
- Eclipse Foundation Eclipse OpenJ9
- Memory corruption
Not analysed yet 22 May 2023