Read the docs
Red Hat Security Advisory

RHSA-2026:9691

OpenJDK 21.0.11 Security Update for Windows Builds

Released 2026-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

Uncontrolled resource consumption in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400
TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

Information disclosure in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200
TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400
TI-2026-17708 CVE-2026-22013 · GHSA-75hh-423h-rvwg

Protection mechanism failure in Oracle Java SE

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00258 Published 2026-04-21 Partial fix CWE-693
TI-2026-19226 CVE-2026-23865 · GHSA-878v-mxg6-vj8f

Out-of-bounds read in FreeType

Priority LOW 23

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType vari…

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00166 Published 2026-03-02 Partial fix CWE-125
TI-2026-17713 CVE-2026-22018 · GHSA-376j-8f52-gp2x

Resource allocation without limits in Oracle Java SE

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00269 Published 2026-04-21 Partial fix CWE-770
TI-2026-26557 CVE-2026-34268 · GHSA-xvmr-9p7m-jmwv

Information disclosure in Oracle Java SE

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00122 Published 2026-04-21 Partial fix CWE-200
TI-2026-17703 CVE-2026-22007 · GHSA-rj5j-26xx-hh3v

Information disclosure in Oracle Java SE

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00124 Published 2026-04-21 Partial fix CWE-200