CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified C

This vulnerability in Oracle Java SE 7u511's 2D component permits an unauthenticated remote attacker to cause a hang or repeated crash, resulting in a complete denial of service. Exploitation can occur via multiple network protocols by leveraging APIs in the affected component, including through sandboxed Java Web Start applications or applets that execute untrusted code relying on the Java sandbox. The CVSS vector indicates no confidentiality impact, limited integrity impact, and significant availability impact.

Successful exploitation results in denial of service by causing the Oracle Java SE process to hang or crash repeatedly. There is no confidentiality impact, and integrity impact is limited. The vulnerability does not require authentication and can be triggered remotely over the network.

No official patch or remediation level is currently provided. Patch status is not yet confirmed — check the Oracle vendor advisory for current remediation guidance. Until a fix is available, consider restricting network access to vulnerable Java SE instances and avoid running untrusted code in sandboxed Java environments.