Search: 22.9-18

A medium severity vulnerability (CVE-2026-91487) exists in the Oracle Java SE Compiler component affecting multiple OpenJDK 8 versions. The flaw has a CVSS 3.1 base score of 4.8, indicating low complexity and network attack vector but requiring high attack complexity and no privileges or user interaction. The vulnerability impacts confidentiality and integrity but not availability. No known exploits in the wild have been reported. No patch or remediation details are provided in the available data.

A high-severity vulnerability (CVE-2026-91484) exists in the Java plugin component of Oracle Java SE, specifically affecting OpenJDK 8 versions listed. The vulnerability has a CVSS 3.1 score of 7.5, indicating high impact on confidentiality and integrity with no impact on availability. It requires local attack vector, high attack complexity, and low privileges without user interaction. No public exploits or cloud service implications are reported.

A low-severity vulnerability (CVE-2026-91477) exists in the Oracle JavaFX component of Oracle Java SE, affecting multiple specific versions. The vulnerability has a CVSS score of 3.1, indicating limited impact primarily on confidentiality with no impact on integrity or availability. It requires network access with high attack complexity and user interaction. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

CVE-2026-91464 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.10. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.3, indicating a network attack vector with high complexity, no privileges required, and user interaction needed. The vulnerability allows high confidentiality impact but does not affect integrity or availability.

CVE-2026-91463 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.3, indicating a network attack vector with high complexity and requiring user interaction, resulting in high confidentiality impact but no integrity or availability impact.

CVE-2026-91462 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed for Ubuntu 16.04 through 26.10. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The vulnerability results in integrity impact but no confidentiality or availability impact. No public exploits or known active exploitation have been reported.

CVE-2026-91461 is a low-severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It does not allow confidentiality or availability compromise but can cause limited integrity issues. No known exploits are reported in the wild.

CVE-2026-91453 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability has no impact on confidentiality or availability but allows for integrity compromise without requiring user interaction or privileges. It affects multiple Ubuntu-packaged versions of OpenJDK 8. No public exploits or known active exploitation have been reported.

CVE-2026-91452 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It does not allow confidentiality or availability impact but can lead to integrity loss without requiring privileges or user interaction.

CVE-2026-91451 is a medium severity vulnerability in the networking component of Oracle Java SE, specifically affecting OpenJDK 8 versions. It does not impact confidentiality or availability but allows for integrity compromise without requiring privileges or user interaction. The vulnerability is publicly known but has no known exploits in the wild. Multiple specific OpenJDK 8 update versions are affected.

CVE-2026-91418 is a medium severity vulnerability affecting multiple specific builds of OpenJDK 8, including versions used in various Ubuntu distributions. The flaw impacts availability without compromising confidentiality or integrity. No public exploits or known active exploitation have been reported.

CVE-2026-91417 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including Oracle Java SE and Oracle GraalVM Enterprise Edition. The vulnerability does not impact confidentiality or integrity but results in a denial of service (availability impact). It requires no privileges and no user interaction to exploit. There are no known exploits in the wild. The affected versions are explicitly listed and pertain to various OpenJDK 8 builds, including Ubuntu package versions.

CVE-2026-91415 is a high severity vulnerability affecting multiple specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04, 18.04, 20.04, 22.04, and 24.04 LTS. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 7.0, indicating a high risk with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability to varying degrees.

CVE-2026-91411 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No public exploits or known active exploitation have been reported.

CVE-2026-91410 is a medium severity vulnerability in Oracle Java SE libraries affecting multiple OpenJDK 8 versions. It does not impact confidentiality or integrity but can cause availability issues. No known exploits are reported in the wild. The vulnerability affects specific OpenJDK 8 builds, primarily used in Ubuntu distributions. No patch or remediation details are provided in the available data.

CVE-2026-91402 is a low-severity vulnerability affecting specific versions of OpenJFX, which is part of Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise. The vulnerability has a CVSS score of 3.1, indicating limited impact, with low confidentiality impact and no integrity or availability impact. It requires network access with high attack complexity and user interaction. No known exploits are reported in the wild. The affected versions are explicitly listed, and no patch or remediation information is provided.

CVE-2026-91400 is a low-severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability has no impact on confidentiality or integrity but may cause a low impact on availability. It requires network access with high attack complexity and user interaction. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-91398 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 6.8, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The flaw results in a security impact of high integrity compromise without affecting confidentiality or availability.

CVE-2026-91397 is a low severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 3.6, indicating low risk, with attack vector local, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

CVE-2026-91396 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. It impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw that requires no privileges or user interaction but results in integrity and availability impacts. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.