Oracle Java SE vulnerabilities

Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

An unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

An unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Unspecified vulnerability in Oracle Java SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. There are claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.

Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Availability impacts).

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE). An unauthenticated attacker over the network (TLS) can cause a partial denial of service (partial DoS).

Vulnerability in Oracle Java SE (component: 2D) versions 25.0.4 and 26.0.2. An unauthenticated attacker with network access via multiple protocols can cause a hang or frequently repeatable crash (complete DoS) of Java SE. The vulnerability can be exploited via APIs in the component, e.g., through a web service supplying data to APIs, and also applies to Java deployments running sandboxed applications.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Networking). Affects multiple versions. Difficult to exploit by an unauthenticated attacker over HTTP, may impact other products (scope change) and allows unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security). Affects multiple versions, including Java SE 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; GraalVM for JDK 17.0.20 and 21.0.12; GraalVM Enterprise Edition 21.3.19. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful attacks can result in unauthorized read access to a subset of data.

Vulnerability in the Install component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A low-privileged attacker with local access can take over the system.

Vulnerability in Oracle Java SE (component: Installation) in versions 8u491 and 8u491-perf. A low-privileged attacker with local access, after user interaction, can take over the Java SE environment.

Vulnerability in Oracle Java SE (component: JavaFX) version 8u491. Difficult to exploit, requires user interaction and network access. Successful attack may lead to unauthorized read access to a subset of data.

Oracle Java SE version 8u491 has a vulnerability in the JavaFX component. This difficult-to-exploit flaw allows an unauthenticated attacker with network access to perform unauthorized read access to a subset of data, requiring user interaction.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security) in multiple versions. Easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to unauthorizedly update, insert, delete, or read a subset of data.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Libraries). An unauthenticated attacker via network can compromise data integrity, gaining unauthorized access to create, delete, or modify critical data.

Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D) in multiple versions have a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access to cause a partial denial of service (partial DOS). This vulnerability primarily affects clients running Java Web Start applets.

Vulnerability in Oracle Java SE (component: Scripting). Affected versions are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data and modify it.

Vulnerability in the Scripting component of Oracle Java SE allows an unauthenticated attacker to remotely cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. The attack is easily exploitable over network via multiple protocols.

A vulnerability in Oracle Java SE 8u491, component JavaFX, allows an unauthenticated attacker with network access to compromise data integrity via unauthorized update, insert, or delete access. The attack requires user interaction and is difficult to exploit. It applies to sandboxed Java deployments like applets or Web Start.

Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.

Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.

Vulnerability in Oracle Java SE (component: Libraries) allows an unauthenticated attacker with network access to cause a partial denial of service (partial DOS). The attack is easy to exploit and can be triggered via APIs, e.g., through a web service.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D). Affects multiple versions. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).

Vulnerability in Oracle Java SE (component: JavaFX). Affects version 8u491. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).

A vulnerability in the ImageIO component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise data integrity, resulting in unauthorized update, insert, or delete access.

Vulnerability in Oracle Java SE (component: JSSE) in multiple versions including 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1 and GraalVM. Difficult to exploit, an unauthenticated attacker via TLS can gain unauthorized access to critical data (creation, deletion, modification).

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE) allows an unauthenticated attacker with network access via TLS to cause a partial denial of service (partial DOS). The attack is easy to exploit.

Vulnerability in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated remote attacker can cause a hang or frequent crash (DOS).

Vulnerability in the JAXP component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can easily exploit this flaw to gain unauthorized access to critical data or all accessible data in these products.

A vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security) allows an unauthenticated attacker with network access to cause a complete denial of service (DOS) via a hang or frequently repeatable crash. Affected versions include Java SE 8u471, 11.0.29, 17.0.17, 21.0.9, 25.0.1 and corresponding GraalVM versions.

Vulnerability in the AWT and JavaFX component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can exploit this flaw via multiple protocols, requiring user interaction. Successful attacks can result in unauthorized creation, deletion, or modification of critical data.