cbcvebase.

Oracle Jdk vulnerabilities

805 known vulnerabilities affecting oracle/jdk.

Total CVEs
805
CISA KEV
8
actively exploited
Public exploits
26
Exploited in wild
18
Severity breakdown
CRITICAL196HIGH125MEDIUM353LOW129

Vulnerabilities

Page 40 of 41
CVE-2017-10193P4LOWCVSS 3.1v1.6.0v1.7.0+1 more2017-08-08
CVE-2017-10193 [LOW] CVE-2017-10193: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful
nvd
CVE-2013-1500P4LOWCVSS 3.6≤ 1.7.0v1.7.0+4 more2013-06-18
CVE-2013-1500 [LOW] CVE-2013-1500: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented
nvd
CVE-2019-2818P4LOWCVSS 3.1v11.0.3v12.0.12019-07-23
CVE-2019-2818 [LOW] CWE-203 CVE-2019-2818: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported version Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than t
nvd
CVE-2023-22006P4LOWCVSS 3.1v11.0.19v17.0.7+1 more2023-07-18
CVE-2023-22006 [LOW] CVE-2023-22006: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK produ Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerabil
nvd
CVE-2024-21003P4LOWCVSS 3.1v1.8.02024-04-16
CVE-2024-21003 [LOW] CWE-250 CVE-2024-21003: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to comp
nvd
CVE-2024-21005P4LOWCVSS 3.1v1.8.02024-04-16
CVE-2024-21005 [LOW] CVE-2024-21005: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise O
nvd
CVE-2026-60166P4LOWCVSS 3.1v1.8.0-update4912026-07-21
CVE-2026-60166 [LOW] CWE-693 CVE-2026-60166: Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful att
nvd
CVE-2026-60164P4LOWCVSS 3.1v1.8.0-update4912026-07-21
CVE-2026-60164 [LOW] CWE-693 CVE-2026-60164: Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful att
nvd
CVE-2019-2449P4LOWCVSS 3.1v1.8.0-update1922019-01-16
CVE-2019-2449 [LOW] CVE-2019-2449: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported v Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Succ
nvd
CVE-2017-10345P4LOWCVSS 3.1v1.6.0v1.7.0+2 more2017-10-19
CVE-2017-10345 [LOW] CVE-2017-10345: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: S Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Ja
nvd
CVE-2024-20923P4LOWCVSS 3.1v1.8.02024-02-17
CVE-2024-20923 [LOW] CWE-693 CVE-2024-20923: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to comp
nvd
CVE-2026-21947P4LOWCVSS 3.1v1.8.02026-01-20
CVE-2026-21947 [LOW] CWE-79 CVE-2026-21947: Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracl Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful
nvd
CVE-2026-47035P4LOWCVSS 3.1v1.8.0-update4912026-07-21
CVE-2026-47035 [LOW] CWE-284 CVE-2026-47035: Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful att
nvd
CVE-2026-47030P4LOWCVSS 3.1v1.8.0-update4912026-07-21
CVE-2026-47030 [LOW] CWE-284 CVE-2026-47030: Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful att
nvd
CVE-2026-47034P4LOWCVSS 3.1v1.8.0-update4912026-07-21
CVE-2026-47034 [LOW] CWE-284 CVE-2026-47034: Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful att
nvd
CVE-2026-22007P4LOWCVSS 2.9v1.8.0-update481v1.8.0-update481_b50+5 more2026-04-21
CVE-2026-22007 [LOW] CWE-200 CVE-2026-22007: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3
nvd
CVE-2026-34268P4LOWCVSS 2.9v1.8.0-update481v1.8.0-update481_b50+5 more2026-04-21
CVE-2026-34268 [LOW] CWE-200 CVE-2026-34268: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3
nvd
CVE-2024-20925P4LOWCVSS 3.1v1.8.02024-02-17
CVE-2024-20925 [LOW] CVE-2024-20925: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise O
nvd
CVE-2016-3485P4LOWCVSS 2.9v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3485 [LOW] CVE-2016-3485: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRock Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
nvd
CVE-2012-1717P4LOWCVSS 2.1≥ 1.4.2, ≤ 1.4.2_37v1.5.0+2 more2012-06-16
CVE-2012-1717 [LOW] CVE-2012-1717: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
nvd
Oracle Jdk vulnerabilities | cvebase