Advisories · Technology

Oracle Corporation Oracle Java SE.

Every CVE that names Oracle Corporation Oracle Java SE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114820 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 24 Oct 2026
CVE-2026-91403 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 21 Oct 2026
CVE-2026-91487 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91484 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91464 CVE record

CVSS 5.3 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91463 CVE record

CVSS 5.3 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91462 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91461 CVE record

CVSS 3.7 Low

Improper certificate validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
Not analysed yet 20 Oct 2026
CVE-2026-91453 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91452 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91451 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91418 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle JavaFX
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91417 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM Enterprise Edition
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91415 CVE record

CVSS 7.0 High

Improper input validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-20
Not analysed yet 20 Oct 2026
CVE-2026-91411 CVE record

CVSS 6.5 Medium

Improper input validation in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-20
Not analysed yet 20 Oct 2026
CVE-2026-91410 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91409 CVE record

CVSS 3.7 Low

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91402 CVE record

CVSS 3.1 Low

Protection mechanism failure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle JavaFX
- CWE-693
Not analysed yet 20 Oct 2026
CVE-2026-91400 CVE record

CVSS 3.1 Low

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91398 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91397 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91396 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91394 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91385 CVE record

CVSS 5.4 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle JavaFX
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91382 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91381 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91380 CVE record

CVSS 4.0 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91379 CVE record

CVSS 4.7 Medium

Use after free in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-91375 CVE record

CVSS 4.7 Medium

Incorrect authorization in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91374 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91373 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-91335 CVE record

CVSS 2.6 Low

Execution with unnecessary privileges in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Privilege escalation
Not analysed yet 20 Oct 2026
CVE-2026-91334 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91333 CVE record

CVSS 3.7 Low

Deserialization of untrusted data in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Insecure deserialization
Not analysed yet 20 Oct 2026
CVE-2026-91332 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87367 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-87294 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87293 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-87292 CVE record

CVSS 3.7 Low

Improper authentication in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87291 CVE record

CVSS 5.3 Medium

Improper authentication in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87290 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-87255 CVE record

CVSS 3.7 Low

Improper authentication in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83400 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 20 Oct 2026
CVE-2026-83395 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83387 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83381 CVE record

CVSS 4.8 Medium

Information disclosure in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83380 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83378 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-83376 CVE record

CVSS 3.7 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83374 CVE record

CVSS 5.9 Medium

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-101737 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101516 CVE record

CVSS 6.5 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Oct 2026
CVE-2026-71054 CVE record

CVSS 6.5 Medium

Resource allocation without limits in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 26 Aug 2026
CVE-2026-70906 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 18 Aug 2026
CVE-2026-62574 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60526 CVE record

CVSS 6.7 Medium

Improper input validation in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- CWE-20
Not analysed yet 21 Jul 2026
CVE-2026-60166 CVE record

CVSS 3.1 Low

Protection mechanism failure in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- CWE-693
Not analysed yet 21 Jul 2026
CVE-2026-60164 CVE record

CVSS 3.1 Low

Protection mechanism failure in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- CWE-693
Not analysed yet 21 Jul 2026
CVE-2026-60147 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026