Advisories · Technology

Oracle Corporation Oracle Java SE.

Every CVE that names Oracle Corporation Oracle Java SE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47063 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47059 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47058 CVE record

CVSS 7.4 High

Deserialization of untrusted data in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Insecure deserialization
Not analysed yet 21 Jul 2026
CVE-2026-47057 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 21 Jul 2026
CVE-2026-47035 CVE record

CVSS 3.1 Low

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47034 CVE record

CVSS 3.1 Low

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47030 CVE record

CVSS 3.1 Low

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47027 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-47021 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Jul 2026
CVE-2026-47013 CVE record

CVSS 5.3 Medium

Resource allocation without limits in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Denial of service
Not analysed yet 21 Jul 2026
CVE-2026-47010 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-46968 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-46917 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-34282 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-34268 CVE record

CVSS 2.9 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Apr 2026
CVE-2026-22021 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-22018 CVE record

CVSS 3.7 Low

Resource allocation without limits in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-22016 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
- Insecure deserialization
Not analysed yet 21 Apr 2026
CVE-2026-22013 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-693
Not analysed yet 21 Apr 2026
CVE-2026-22008 CVE record

CVSS 3.7 Low

Execution with unnecessary privileges in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Privilege escalation
Not analysed yet 21 Apr 2026
CVE-2026-22007 CVE record

CVSS 2.9 Low

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Apr 2026
CVE-2026-22003 CVE record

CVSS 6.0 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM Enterprise Edition
- Denial of service
Not analysed yet 21 Apr 2026
CVE-2026-21947 CVE record

CVSS 3.1 Low

Cross-site scripting in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2026-21945 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Weak cryptography or TLS
- Denial of service
Not analysed yet 20 Jan 2026
CVE-2026-21933 CVE record

CVSS 6.1 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Jan 2026
CVE-2026-21932 CVE record

CVSS 7.4 High

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- CWE-1287
Not analysed yet 20 Jan 2026
CVE-2026-21925 CVE record

CVSS 4.8 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 20 Jan 2026
CVE-2025-61748 CVE record

CVSS 3.7 Low

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-53066 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Information disclosure
Not analysed yet 21 Oct 2025
CVE-2025-53057 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-30761 CVE record

CVSS 5.9 Medium

Deserialization of untrusted data in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM Enterprise Edition
- Insecure deserialization
Not analysed yet 15 Jul 2025
CVE-2025-50106 CVE record

CVSS 8.1 High

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 15 Jul 2025
CVE-2025-50063 CVE record

CVSS 7.3 High

Vulnerability in Oracle Java SE (component: Install).
- Oracle Corporation Oracle Java SE
Not analysed yet 15 Jul 2025
CVE-2025-50059 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-30754 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-30752 CVE record

CVSS 3.7 Low

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Denial of service
Not analysed yet 15 Jul 2025
CVE-2025-30749 CVE record

CVSS 8.1 High

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
Not analysed yet 15 Jul 2025
CVE-2025-30698 CVE record

CVSS 5.6 Medium

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30691 CVE record

CVSS 4.8 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-21587 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-21502 CVE record

CVSS 4.8 Medium

Incorrect authorization in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 21 Jan 2025
CVE-2024-21235 CVE record

CVSS 4.8 Medium

Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…
- Oracle Corporation Oracle Java SE
Not analysed yet 15 Oct 2024
CVE-2024-21217 CVE record

CVSS 3.7 Low

Deserialization of untrusted data in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Insecure deserialization
Not analysed yet 15 Oct 2024
CVE-2024-21211 CVE record

CVSS 3.7 Low

Insecure storage of sensitive information in Oracle Corporation GraalVM and others
- Oracle Corporation GraalVM
- Oracle Corporation Oracle Java SE
- Information disclosure
Not analysed yet 15 Oct 2024
CVE-2024-21210 CVE record

CVSS 3.7 Low

Observable discrepancy in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Information disclosure
Not analysed yet 15 Oct 2024
CVE-2024-21208 CVE record

CVSS 3.7 Low

Observable discrepancy in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Information disclosure
Not analysed yet 15 Oct 2024