Debian Openjdk-8 vulnerabilities
333 known vulnerabilities affecting debian/openjdk-8.
Total CVEs
333
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL46HIGH45MEDIUM166LOW76
Vulnerabilities
Page 4 of 17
CVE-2018-3149P3HIGHCVSS 8.3fixed in openjdk-11 11.0.1+13-1 (bullseye)2018
CVE-2018-3149 [HIGH] CVE-2018-3149: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java S
debian
CVE-2025-50106P3HIGHCVSS 8.1fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-50106 [HIGH] CVE-2025-50106: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit
debian
CVE-2018-2633P3HIGHCVSS 8.3fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2633 [HIGH] CVE-2018-2633: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java
debian
CVE-2017-10111P3CRITICALCVSS 9.6fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10111 [CRITICAL] CVE-2017-10111: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require h
debian
CVE-2015-4868P3HIGHCVSS 7.6fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4868 [HIGH] CVE-2015-4868: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allow...
Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2018-2637P3HIGHCVSS 7.4fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2637 [HIGH] CVE-2018-2637: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java
debian
CVE-2014-6485P3CRITICALCVSS 9.3fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6485 [CRITICAL] CVE-2014-6485: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u20 and JavaFX 2.2.65 allows remote...
Unspecified vulnerability in Oracle Java SE 8u20 and JavaFX 2.2.65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Scope: local
sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2025-30749P3HIGHCVSS 8.1fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-30749 [HIGH] CVE-2025-30749: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit
debian
CVE-2015-0437P3CRITICALCVSS 9.3fixed in openjdk-8 8u40~b22-1 (sid)2015
CVE-2015-0437 [CRITICAL] CVE-2015-0437: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affe...
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Scope: local
sid: resolved (fixed in 8u40~b22-1)
debian
CVE-2025-53066P3HIGHCVSS 7.5fixed in openjdk-11 11.0.29+6-1~deb11u1 (bullseye)2025
CVE-2025-53066 [HIGH] CVE-2025-53066: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerabilit
debian
CVE-2020-2805P3HIGHCVSS 8.3fixed in openjdk-11 11.0.7+10-1 (bullseye)2020
CVE-2020-2805 [HIGH] CVE-2020-2805: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful atta
debian
CVE-2020-14583P3HIGHCVSS 8.3fixed in openjdk-11 11.0.8+10-1 (bullseye)2020
CVE-2020-14583 [HIGH] CVE-2020-14583: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successfu
debian
CVE-2025-21587P3HIGHCVSS 7.4fixed in openjdk-11 11.0.27+6-1~deb11u1 (bullseye)2025
CVE-2025-21587 [HIGH] CVE-2025-21587: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit
debian
CVE-2021-2388P3HIGHCVSS 7.5fixed in openjdk-11 11.0.12+7-1 (bullseye)2021
CVE-2021-2388 [HIGH] CVE-2021-2388: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl...
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Jav
debian
CVE-2017-10078P3HIGHCVSS 8.1fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10078 [HIGH] CVE-2017-10078: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scriptin...
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modi
debian
CVE-2019-2602P3HIGHCVSS 7.5fixed in openjdk-11 11.0.3+7-1 (bullseye)2019
CVE-2019-2602 [HIGH] CVE-2019-2602: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful a
debian
CVE-2023-21930P3HIGHCVSS 7.4fixed in openjdk-11 11.0.20+8-1~deb11u1 (bullseye)2023
CVE-2023-21930 [HIGH] CVE-2023-21930: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
debian
CVE-2024-21147P3HIGHCVSS 7.4fixed in openjdk-11 11.0.24+8-2~deb11u1 (bullseye)2024
CVE-2024-21147 [HIGH] CVE-2024-21147: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficu
debian
CVE-2018-3169P3HIGHCVSS 8.3fixed in openjdk-11 11.0.1+13-1 (bullseye)2018
CVE-2018-3169 [HIGH] CVE-2018-3169: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks r
debian
CVE-2018-2814P3HIGHCVSS 8.3fixed in openjdk-8 8u171-b11-1 (sid)2018
CVE-2018-2814 [HIGH] CVE-2018-2814: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful att
debian