Oracle Corporation Oracle GraalVM for JDK
64 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114820 | 17.0.21.0.2 ; 21.0.13.0.2 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-91403 | 17.0.21 ; 21.0.13 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-91464 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-91463 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-91462 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-91461 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | LOW 3.7 | 0.2 % | ||
| CVE-2026-91453 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightwe | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-91452 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-91418 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-91415 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | HIGH 7.0 | 0.2 % | ||
| CVE-2026-91411 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-91400 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). | LOW 3.1 | 0.3 % | ||
| CVE-2026-91398 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-91397 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Service | LOW 3.6 | 0.1 % | ||
| CVE-2026-91396 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-91395 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-91394 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-91382 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-91380 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility | MEDIUM 4.0 | 0.1 % | ||
| CVE-2026-91379 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK too | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-91374 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Service | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-91335 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). | LOW 2.6 | 0.2 % | ||
| CVE-2026-91334 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO | LOW 3.7 | 0.2 % | ||
| CVE-2026-87367 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). | LOW 3.7 | 0.3 % | ||
| CVE-2026-87294 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-87292 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | LOW 3.7 | 0.3 % | ||
| CVE-2026-87290 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-83400 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-83395 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-83387 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-83380 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-83376 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | LOW 3.7 | 0.3 % | ||
| CVE-2026-83374 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-101516 | 17.0.20.1 ; 21.0.12.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-62574 | 17.0.20 ; 21.0.12 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install | HIGH 7.8 | 0.1 % | ||
| CVE-2026-60147 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-47063 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari | HIGH 7.5 | 0.3 % | ||
| CVE-2026-47059 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | LOW 3.7 | 0.3 % | ||
| CVE-2026-47021 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-47010 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO | LOW 3.7 | 0.3 % | ||
| CVE-2026-46917 | 17.0.19 ; 21.0.11 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-34282 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | HIGH 7.5 | 0.6 % | ||
| CVE-2026-34268 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | LOW 2.9 | 0.1 % | ||
| CVE-2026-22021 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-22018 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari | LOW 3.7 | 0.3 % | ||
| CVE-2026-22016 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). | HIGH 7.5 | 0.7 % | ||
| CVE-2026-22013 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-22007 | 17.0.18 ; 21.0.10 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | LOW 2.9 | 0.1 % | ||
| CVE-2026-21945 | 17.0.17 ; 21.0.9 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | HIGH 7.5 | 1.0 % | ||
| CVE-2026-21933 | 17.0.17 ; 21.0.9 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-21932 | 17.0.17 ; 21.0.9 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, Ja | HIGH 7.4 | 0.5 % | ||
| CVE-2026-21925 | 17.0.17 ; 21.0.9 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-61755 | 17.0.16 ; 21.0.8 | Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracl | LOW 3.7 | 0.3 % | ||
| CVE-2025-61748 | 21.0.8 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari | LOW 3.7 | 0.4 % | ||
| CVE-2025-53066 | 17.0.16 ; 21.0.8 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). | HIGH 7.5 | 0.7 % | ||
| CVE-2025-53057 | 17.0.16 ; 21.0.8 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit | MEDIUM 5.9 | 0.5 % | ||
| CVE-2025-50106 | 17.0.15 ; 21.0.7 ; 24.0.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | HIGH 8.1 | 0.8 % | ||
| CVE-2025-50065 | 24.0.1 | Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). The supported version that is affected is | LOW 3.7 | 0.4 % | ||
| CVE-2025-50059 | 17.0.15 ; 21.0.7 ; 24.0.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network | HIGH 8.6 | 0.6 % | ||
| CVE-2025-30754 | 17.0.15 ; 21.0.7 ; 24.0.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | MEDIUM 4.8 | 0.5 % | ||
| CVE-2025-30752 | 24.0.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The supported version that is | LOW 3.7 | 0.7 % | ||
| CVE-2025-30749 | 17.0.15 ; 21.0.7 ; 24.0.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | HIGH 8.1 | 1.3 % | ||
| CVE-2025-30698 | 17.0.14 ; 21.0.6 ; 24 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). S | MEDIUM 5.6 | 0.6 % | ||
| CVE-2025-21587 | 17.0.14 ; 21.0.6 ; 24 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). | HIGH 7.4 | 0.8 % |