Oracle JavaFX vulnerabilities
3 known CVE vulnerabilities in Oracle JavaFX, translated and rated.
- CVE-2026-91477Low
Vulnerability in Oracle JavaFX (component: JavaFX) affecting versions 25.0.4 and 27. A difficult to exploit flaw allows an unauthenticated network attacker to read a subset of data, requiring user interaction; applies to clients running sandboxed Java Web Start/applets.
- CVE-2026-91402Low
Vulnerability in Oracle Java SE, Oracle JavaFX and Oracle GraalVM Enterprise Edition (component: JavaFX). A difficult to exploit flaw allows an unauthenticated network attacker to read a subset of data, requiring user interaction; applies to sandboxed Java clients.
- CVE-2026-91385Medium
Vulnerability in the JavaFX component of Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can, with user interaction, perform unauthorized modification and read access to some data. The flaw affects clients running untrusted code in a sandbox.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

