Advisories · Technology

Oracle Corporation Java SE JDK and JRE.

Every CVE that names Oracle Corporation Java SE JDK and JRE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-21147 CVE record

CVSS 7.4 High

Information disclosure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Information disclosure
Not analysed yet 16 Jul 2024
CVE-2024-21145 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Jul 2024
CVE-2024-21144 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Jul 2024
CVE-2024-21140 CVE record

CVSS 4.8 Medium

Information disclosure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Information disclosure
Not analysed yet 16 Jul 2024
CVE-2024-21138 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Jul 2024
CVE-2024-21131 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Jul 2024
CVE-2024-21094 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
- CWE-349
Not analysed yet 16 Apr 2024
CVE-2024-21085 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Apr 2024
CVE-2024-21068 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Apr 2024
CVE-2024-21012 CVE record

CVSS 3.7 Low

Incorrect default permissions in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-21011 CVE record

CVSS 3.7 Low

Resource allocation without limits in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Denial of service
Not analysed yet 16 Apr 2024
CVE-2024-21005 CVE record

CVSS 3.1 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Apr 2024
CVE-2024-21004 CVE record

CVSS 2.5 Low

Incorrect default permissions in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-21003 CVE record

CVSS 3.1 Low

Execution with unnecessary privileges in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Privilege escalation
Not analysed yet 16 Apr 2024
CVE-2024-21002 CVE record

CVSS 2.5 Low

Incorrect default permissions in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-20945 CVE record

CVSS 4.7 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Feb 2024
CVE-2024-20923 CVE record

CVSS 3.1 Low

Protection mechanism failure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- CWE-693
Not analysed yet 17 Feb 2024
CVE-2024-20921 CVE record

CVSS 5.9 Medium

Incorrect default permissions in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 17 Feb 2024
CVE-2024-20919 CVE record

CVSS 5.9 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Feb 2024
CVE-2024-20952 CVE record

CVSS 7.4 High

Use after free in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
- Memory corruption
Not analysed yet 16 Jan 2024
CVE-2024-20932 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2024-20926 CVE record

CVSS 5.9 Medium

Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
- Insecure deserialization
Not analysed yet 16 Jan 2024
CVE-2024-20922 CVE record

CVSS 2.5 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 16 Jan 2024
CVE-2024-20918 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2023-22081 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Oct 2023
CVE-2023-22067 CVE record

CVSS 5.3 Medium

Incorrect authorization in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 17 Oct 2023
CVE-2023-22025 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Oct 2023
CVE-2023-22049 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22045 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22044 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22043 CVE record

CVSS 5.9 Medium

Vulnerability in Oracle Java SE (component: JavaFX).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22041 CVE record

CVSS 5.1 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22036 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-22006 CVE record

CVSS 3.1 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Jul 2023
CVE-2023-21968 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 18 Apr 2023
CVE-2023-21967 CVE record

CVSS 5.9 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21954 CVE record

CVSS 5.9 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21939 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21938 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21937 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21930 CVE record

CVSS 7.4 High

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Apr 2023
CVE-2023-21843 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Jan 2023
CVE-2023-21835 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Jan 2023
CVE-2023-21830 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 17 Jan 2023
CVE-2022-39399 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 18 Oct 2022
CVE-2022-21628 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 18 Oct 2022
CVE-2022-21626 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- CWE-693
Not analysed yet 18 Oct 2022
CVE-2022-21624 CVE record

CVSS 3.7 Low

Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Insecure deserialization
Not analysed yet 18 Oct 2022
CVE-2022-21619 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 18 Oct 2022
CVE-2022-21618 CVE record

CVSS 5.3 Medium

Improper authentication in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Authentication bypass
Not analysed yet 18 Oct 2022
CVE-2022-21549 CVE record

CVSS 5.3 Medium

Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Insecure deserialization
Not analysed yet 19 Jul 2022
CVE-2022-21541 CVE record

CVSS 5.9 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Jul 2022
CVE-2022-21540 CVE record

CVSS 5.3 Medium

Use after free in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Memory corruption
Not analysed yet 19 Jul 2022
CVE-2022-21496 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Apr 2022
CVE-2022-21476 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Broken access control
Not analysed yet 19 Apr 2022
CVE-2022-21449 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Apr 2022
CVE-2022-21443 CVE record

CVSS 3.7 Low

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Apr 2022
CVE-2022-21434 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Apr 2022
CVE-2022-21426 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).
- Oracle Corporation Java SE JDK and JRE
Not analysed yet 19 Apr 2022
CVE-2022-21366 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- Denial of service
Not analysed yet 19 Jan 2022