Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…
Affects Microsoft Security Response Center MicrosoftSource GCVE Database
Not known to be exploited · CVSS 9.1 Critical.
Data as of 10/25/2026, 12:14:43 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Security Response Center Microsoft | Affected
| Fixed in– |
Description
CVE-2026-91403 is a vulnerability affecting Microsoft product version 3.0. The description references Microsoft Support Lifecycle information but does not provide specific technical details about the vulnerability. No CVSS score or detailed impact information is available.
Impact
The impact cannot be precisely determined from the available data. The CWE-327 classification indicates a cryptographic weakness, which could potentially affect data confidentiality or integrity, but no explicit impact or exploitation details are provided.
Summary
This vulnerability, identified as CVE-2026-91403, affects Microsoft product version 3.0. The provided information lacks technical details about the nature of the vulnerability or its exploitation. The CWE identifier CWE-327 suggests a weakness related to cryptographic issues, but no further specifics are given. No patch or remediation details are provided.
Weaknesses
- CWE-327Use of a Broken or Risky Cryptographic Algorithm (opens in a new tab)
Class weaknessLikelihood of exploit: HighOWASP Top 10 A04:2025: Cryptographic Failures (opens in a new tab)
The product uses a broken or risky cryptographic algorithm or protocol.