CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified C

This vulnerability in Oracle Java SE 7u511's 2D component allows an unauthenticated network attacker to cause a hang or repeated crash, resulting in a complete denial of service. Exploitation can occur through APIs, including those used by sandboxed Java Web Start applications or applets that load untrusted code. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with no confidentiality impact, low integrity impact, and high availability impact.

Successful exploitation results in denial of service by causing Oracle Java SE to hang or crash repeatedly. There is no direct confidentiality impact, but integrity is slightly affected. The attack requires no authentication and can be performed remotely over the network.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting network access to vulnerable Java SE instances and avoid running untrusted code in sandboxed Java environments.