Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

817 records

Vendor: Oracle Component: Jre Clear all filters
TI-2026-44688 CVE-2026-62574 · GHSA-5cp5-8443-8v7r

Improper access control in Oracle Java SE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-07-21 No fix listed CWE-284
TI-2026-43191 CVE-2026-60526 · GHSA-8658-gj58-hrr8

Improper input validation in Oracle Java SE

Priority LOW 31

Vulnerability in Oracle Java SE (component: Installation).

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.0015 Published 2026-07-21 No fix listed CWE-20
TI-2026-42850 CVE-2026-60147 · GHSA-4pv6-97j8-3pwq

Improper access control in Oracle Java SE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00287 Published 2026-07-21 Partial fix CWE-284
TI-2026-34665 CVE-2026-47063 · GHSA-vw39-pj36-hc59

Improper access control in Oracle Java SE

Priority LOW 38

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00256 Published 2026-07-21 Partial fix CWE-284
TI-2026-34661 CVE-2026-47059 · GHSA-c4gh-498r-f8f5

Improper access control in Oracle Java SE

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00306 Published 2026-07-21 Partial fix CWE-284
TI-2026-34638 CVE-2026-47035 · GHSA-w56g-q7c4-9v8p

Improper access control in Oracle Java SE

Priority LOW 15

Vulnerability in Oracle Java SE (component: JavaFX).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00246 Published 2026-07-21 No fix listed CWE-284
TI-2026-34637 CVE-2026-47034 · GHSA-c6vv-q92q-68pg

Improper access control in Oracle Java SE

Priority LOW 15

Vulnerability in Oracle Java SE (component: JavaFX).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00246 Published 2026-07-21 No fix listed CWE-284
TI-2026-34633 CVE-2026-47030 · GHSA-xg4j-9fq9-qmm5

Improper access control in Oracle Java SE

Priority LOW 15

Vulnerability in Oracle Java SE (component: JavaFX).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00246 Published 2026-07-21 No fix listed CWE-284
TI-2026-34631 CVE-2026-47027 · GHSA-cqfh-fjhw-mr88

Improper access control in Oracle Java SE

Priority LOW 30

Vulnerability in Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284
TI-2026-34626 CVE-2026-47021 · GHSA-qw6j-rcfr-8vrx

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-07-21 Partial fix CWE-400
TI-2026-34616 CVE-2026-47010 · GHSA-fhjm-g79r-vv57

Improper access control in Oracle Java SE

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00254 Published 2026-07-21 Partial fix CWE-284
TI-2026-34574 CVE-2026-46968 · GHSA-hhf8-3x8g-6pff

Improper access control in Oracle Java SE

Priority LOW 26

Vulnerability in Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00291 Published 2026-07-21 Partial fix CWE-284
TI-2026-34523 CVE-2026-46917 · GHSA-x5x7-pvpw-w5hv

Improper access control in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284
TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

Uncontrolled resource consumption in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400
TI-2026-26557 CVE-2026-34268 · GHSA-xvmr-9p7m-jmwv

Information disclosure in Oracle Java SE

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00122 Published 2026-04-21 Partial fix CWE-200
TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400
TI-2026-17713 CVE-2026-22018 · GHSA-376j-8f52-gp2x

Resource allocation without limits in Oracle Java SE

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00269 Published 2026-04-21 Partial fix CWE-770
TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

Information disclosure in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200
TI-2026-17708 CVE-2026-22013 · GHSA-75hh-423h-rvwg

Protection mechanism failure in Oracle Java SE

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00258 Published 2026-04-21 Partial fix CWE-693
Load more