Advisories · Technology

Oracle Corporation Oracle GraalVM for JDK.

Every CVE that names Oracle Corporation Oracle GraalVM for JDK among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114820 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 24 Oct 2026
CVE-2026-91403 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 21 Oct 2026
CVE-2026-91464 CVE record

CVSS 5.3 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91463 CVE record

CVSS 5.3 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91462 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91461 CVE record

CVSS 3.7 Low

Improper certificate validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 20 Oct 2026
CVE-2026-91453 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91452 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91418 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle JavaFX
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91415 CVE record

CVSS 7.0 High

Improper input validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-20
Not analysed yet 20 Oct 2026
CVE-2026-91411 CVE record

CVSS 6.5 Medium

Improper input validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-20
Not analysed yet 20 Oct 2026
CVE-2026-91400 CVE record

CVSS 3.1 Low

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91398 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91397 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91396 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91394 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91382 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91380 CVE record

CVSS 4.0 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91379 CVE record

CVSS 4.7 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91374 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91335 CVE record

CVSS 2.6 Low

Execution with unnecessary privileges in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Privilege escalation
Not analysed yet 20 Oct 2026
CVE-2026-91334 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-87367 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-87294 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87292 CVE record

CVSS 3.7 Low

Improper authentication in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87290 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83400 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-83395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83387 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83380 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83376 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83374 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-101516 CVE record

CVSS 6.5 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Oct 2026
CVE-2026-62574 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60147 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47063 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47059 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47021 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Jul 2026
CVE-2026-47010 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-46917 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-34282 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-34268 CVE record

CVSS 2.9 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Apr 2026
CVE-2026-22021 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-22018 CVE record

CVSS 3.7 Low

Resource allocation without limits in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-22016 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
- Insecure deserialization
Not analysed yet 21 Apr 2026
CVE-2026-22013 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-693
Not analysed yet 21 Apr 2026
CVE-2026-22007 CVE record

CVSS 2.9 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Apr 2026
CVE-2026-21945 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
- Denial of service
Not analysed yet 20 Jan 2026
CVE-2026-21933 CVE record

CVSS 6.1 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Jan 2026
CVE-2026-21932 CVE record

CVSS 7.4 High

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-1287
Not analysed yet 20 Jan 2026
CVE-2026-21925 CVE record

CVSS 4.8 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Jan 2026
CVE-2025-61755 CVE record

CVSS 3.7 Low

Missing authorization in Oracle Corporation Oracle GraalVM for JDK
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-61748 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-53066 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Oct 2025
CVE-2025-53057 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-50106 CVE record

CVSS 8.1 High

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 15 Jul 2025
CVE-2025-50065 CVE record

CVSS 3.7 Low

Improper privilege management in Oracle Corporation Oracle GraalVM for JDK
- Oracle Corporation Oracle GraalVM for JDK
- Privilege escalation
Not analysed yet 15 Jul 2025
CVE-2025-50059 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-30754 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Jul 2025