Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

32 records

Advisory: Oracle GraalVM for JDK — oracle.com/security-alerts/cpuoct2026.html Clear all filters
TI-2026-77517 CVE-2026-91464 · GHSA-gj42-xjcm-wrr9

Use after free in Oracle Java SE JGSS component

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00289 Published 2026-10-20 Partial fix CWE-416
TI-2026-77516 CVE-2026-91463 · GHSA-pq5q-77c8-hwjv

Use-after-free in Oracle Java SE JGSS component

Priority LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00227 Published 2026-10-20 Partial fix CWE-416
TI-2026-77515 CVE-2026-91462 · GHSA-g364-xwwc-5hvh

Improper access control in Oracle Java SE JGSS component

Priority LOW 26

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00274 Published 2026-10-20 Partial fix CWE-284
TI-2026-77514 CVE-2026-91461 · GHSA-hrmf-22mm-2484

Oracle Java SE and GraalVM JSSE improper certificate validation

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00187 Published 2026-10-20 Partial fix CWE-295
TI-2026-77508 CVE-2026-91453 · GHSA-wh5x-8c26-q7r3

Improper access control in Oracle Java SE Lightweight HTTP Server

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2026-10-20 Partial fix CWE-284
TI-2026-77507 CVE-2026-91452 · GHSA-vgqv-368p-h4w6

Improper access control in Oracle Java SE Networking component

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2026-10-20 Partial fix CWE-284
TI-2026-77474 CVE-2026-91418 · GHSA-xjm9-7q5c-fwv4

Uncontrolled resource consumption in Oracle Java SE ImageIO

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2026-10-20 Partial fix CWE-400
TI-2026-77472 CVE-2026-91415 · GHSA-vmv5-g2r5-cqmj

Improper input validation in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00239 Published 2026-10-20 Partial fix CWE-20
TI-2026-77468 CVE-2026-91411 · GHSA-vhxj-84r5-67g5

Improper input validation in Oracle Java SE JGSS component

Priority LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00267 Published 2026-10-20 Partial fix CWE-20
TI-2026-77457 CVE-2026-91398 · GHSA-g7qg-48g2-c549

Improper access control in Oracle Java SE networking component

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00231 Published 2026-10-20 Partial fix CWE-284
TI-2026-77456 CVE-2026-91397 · GHSA-xqpm-j9mr-99m8

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 16

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00095 Published 2026-10-20 Partial fix CWE-284
TI-2026-77455 CVE-2026-91396 · GHSA-4hrr-844c-vx6m

Improper access control in Oracle Java SE and GraalVM

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00333 Published 2026-10-20 Partial fix CWE-284
TI-2026-77454 CVE-2026-91395 · GHSA-8m6q-v2gj-h6vq

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00253 Published 2026-10-20 Partial fix CWE-284
TI-2026-77441 CVE-2026-91382 · GHSA-wp5h-3q7r-3q8q

Improper access control in Oracle Java SE 2D component

Priority LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00377 Published 2026-10-20 Partial fix CWE-284
TI-2026-77438 CVE-2026-91379 · GHSA-53gh-9p66-w4f4

Use after free in Oracle Java SE and GraalVM JDK tools

Priority LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00122 Published 2026-10-20 Partial fix CWE-416
TI-2026-77433 CVE-2026-91374 · GHSA-h6m7-6w4j-rx23

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 21

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00168 Published 2026-10-20 Partial fix CWE-284
TI-2026-77394 CVE-2026-91335 · GHSA-jp97-m28p-vxx8

Information disclosure in Oracle Java SE AWT component

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).

CVSS 3.1LOW 2.6 Network Low privileges User interaction EPSS 0.0021 Published 2026-10-20 Partial fix CWE-250
TI-2026-77393 CVE-2026-91334 · GHSA-x8mv-p396-jh2r

Oracle Java SE ImageIO flaw allows unauthorized read access

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00208 Published 2026-10-20 Partial fix CWE-200
TI-2026-77207 CVE-2026-87367 · GHSA-m2mw-3v6r-66h4

Unauthorized data changes in Oracle Java SE JAXP component

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00252 Published 2026-10-20 Partial fix CWE-200
TI-2026-77135 CVE-2026-87294 · GHSA-f77q-p3hr-hvw8

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00262 Published 2026-10-20 Partial fix CWE-284
TI-2026-77133 CVE-2026-87292 · GHSA-wfmw-xhqr-83hm

Improper authentication in Oracle Java SE Networking component

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00239 Published 2026-10-20 Partial fix CWE-287
TI-2026-77131 CVE-2026-87290 · GHSA-p9mx-r8ww-77qq

Sensitive information exposure in Oracle Java SE JAXP component

Priority LOW 26

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00327 Published 2026-10-20 Partial fix CWE-200
Load more