Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

51 records

Advisory: Oracle Java SE — oracle.com/security-alerts/cpuoct2026.html Clear all filters
TI-2026-77517 CVE-2026-91464 · GHSA-gj42-xjcm-wrr9

Use after free in Oracle Java SE JGSS component

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00289 Published 2026-10-20 Partial fix CWE-416
TI-2026-77516 CVE-2026-91463 · GHSA-pq5q-77c8-hwjv

Use-after-free in Oracle Java SE JGSS component

Priority LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00227 Published 2026-10-20 Partial fix CWE-416
TI-2026-77515 CVE-2026-91462 · GHSA-g364-xwwc-5hvh

Improper access control in Oracle Java SE JGSS component

Priority LOW 26

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00274 Published 2026-10-20 Partial fix CWE-284
TI-2026-77514 CVE-2026-91461 · GHSA-hrmf-22mm-2484

Oracle Java SE and GraalVM JSSE improper certificate validation

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00187 Published 2026-10-20 Partial fix CWE-295
TI-2026-77508 CVE-2026-91453 · GHSA-wh5x-8c26-q7r3

Improper access control in Oracle Java SE Lightweight HTTP Server

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2026-10-20 Partial fix CWE-284
TI-2026-77507 CVE-2026-91452 · GHSA-vgqv-368p-h4w6

Improper access control in Oracle Java SE Networking component

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2026-10-20 Partial fix CWE-284
TI-2026-77474 CVE-2026-91418 · GHSA-xjm9-7q5c-fwv4

Uncontrolled resource consumption in Oracle Java SE ImageIO

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2026-10-20 Partial fix CWE-400
TI-2026-77472 CVE-2026-91415 · GHSA-vmv5-g2r5-cqmj

Improper input validation in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00239 Published 2026-10-20 Partial fix CWE-20
TI-2026-77468 CVE-2026-91411 · GHSA-vhxj-84r5-67g5

Improper input validation in Oracle Java SE JGSS component

Priority LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00267 Published 2026-10-20 Partial fix CWE-20
TI-2026-77460 CVE-2026-91402 · GHSA-fwxr-p9rc-4fqg

Protection mechanism failure in Oracle Java SE JavaFX

Priority LOW 15

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00243 Published 2026-10-20 No fix listed CWE-693
TI-2026-77457 CVE-2026-91398 · GHSA-g7qg-48g2-c549

Improper access control in Oracle Java SE networking component

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00231 Published 2026-10-20 Partial fix CWE-284
TI-2026-77456 CVE-2026-91397 · GHSA-xqpm-j9mr-99m8

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 16

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00095 Published 2026-10-20 Partial fix CWE-284
TI-2026-77455 CVE-2026-91396 · GHSA-4hrr-844c-vx6m

Improper access control in Oracle Java SE and GraalVM

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00333 Published 2026-10-20 Partial fix CWE-284
TI-2026-77454 CVE-2026-91395 · GHSA-8m6q-v2gj-h6vq

Improper access control in Oracle Java SE and GraalVM products

Priority LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00253 Published 2026-10-20 Partial fix CWE-284
TI-2026-77441 CVE-2026-91382 · GHSA-wp5h-3q7r-3q8q

Improper access control in Oracle Java SE 2D component

Priority LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00377 Published 2026-10-20 Partial fix CWE-284
Load more