Search: 22.9-18

CVE-2026-91395 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability does not impact confidentiality but allows for integrity and availability impacts without requiring privileges or user interaction. It has a CVSS 3.1 base score of 6.5.

CVE-2026-91394 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu distributions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK products. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the available data.

CVE-2026-91385 is a medium severity vulnerability affecting multiple versions of OpenJFX, including versions bundled with Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network exploitable flaw that requires no privileges but user interaction. The impact includes limited confidentiality and integrity loss without availability impact. No public exploits or patches are currently documented.

CVE-2026-91382 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu releases. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The vulnerability does not affect confidentiality but impacts integrity and availability.

CVE-2026-91381 is a low severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM Enterprise Edition. The vulnerability has a CVSS score of 3.7 with no confidentiality or availability impact, but it can cause limited integrity impact. It requires network attack vector with high attack complexity and no privileges or user interaction. The affected versions are specific OpenJDK 8 update builds. No known exploits in the wild have been reported.

CVE-2026-91380 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed on Ubuntu 16.04 through 26.10. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 4.0, indicating low complexity and limited impact on confidentiality and integrity, with no impact on availability. No public exploits or known active exploitation have been reported. The vulnerability requires local access with high attack complexity and no privileges or user interaction needed.

CVE-2026-91379 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability has a CVSS 3.1 base score of 4.7, indicating limited impact with high attack complexity and requiring user interaction. It does not affect confidentiality or availability but impacts integrity. No known exploits are reported in the wild. The affected versions are specific OpenJDK 8 builds primarily used in Ubuntu distributions.

CVE-2026-91375 is a medium severity vulnerability in Oracle Java SE libraries affecting multiple OpenJDK 8 versions. The vulnerability has an impact on integrity but does not affect confidentiality or availability. It requires local attack vector with high attack complexity and no privileges, and user interaction is required for exploitation.

CVE-2026-91374 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related components. It has a CVSS 3.1 base score of 4.8, indicating low to moderate impact on confidentiality and integrity without affecting availability. No public exploits or active exploitation have been reported.

A medium severity vulnerability (CVE-2026-91373) exists in Oracle Java SE's JSSE component affecting multiple OpenJDK 8 versions. The flaw impacts availability but does not affect confidentiality or integrity. No known exploits are reported in the wild.

CVE-2026-91335 is a low severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The flaw has a CVSS score of 2.6, indicating limited impact, primarily involving low confidentiality impact and requiring high attack complexity and user interaction. No known exploits are reported in the wild.

CVE-2026-91334 is a low-severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. The vulnerability has a CVSS score of 3.7, indicating limited impact with low confidentiality impact and no integrity or availability impact. No public exploits or known active exploitation have been reported. The affected versions are explicitly listed and include multiple Ubuntu-specific builds of OpenJDK 8.

CVE-2026-91333 is a low-severity vulnerability in Oracle Java SE affecting OpenJDK 8 versions. It involves a security component flaw that does not impact confidentiality or availability but may cause limited integrity issues. The vulnerability requires network attack vector with high attack complexity and no privileges or user interaction. Multiple specific OpenJDK 8 update versions are affected.

CVE-2026-91332 is a medium severity vulnerability in the Networking component of Oracle Java SE, specifically affecting OpenJDK 8 builds. It has a CVSS 3.1 base score of 5.3 with no confidentiality or availability impact but with a low integrity impact. The vulnerability does not require privileges or user interaction to be exploited. No known exploits are reported in the wild. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.

A medium severity vulnerability (CVE-2026-87303) affects specific versions of Oracle VM VirtualBox. The flaw has a CVSS 3.1 base score of 5.9, indicating limited impact on confidentiality and integrity but a significant impact on availability. The vulnerability requires local access with low privileges and user interaction to exploit. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-87294 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, causing limited confidentiality and integrity impacts but no availability impact. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.

A medium severity vulnerability (CVE-2026-87293) exists in Oracle Java SE's RMI component affecting multiple OpenJDK 8 versions. The flaw allows remote attackers to cause partial confidentiality and integrity loss without authentication. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with high attack complexity and no privileges required. No public exploits or known active exploitation have been reported. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.

CVE-2026-87292 is a low-severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability does not impact confidentiality or availability but may allow limited integrity compromise. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

A medium severity vulnerability (CVE-2026-87291) exists in the Networking component of Oracle Java SE, specifically affecting OpenJDK 8 versions listed. The flaw allows an attacker to obtain limited information (confidentiality impact) without requiring privileges or user interaction. No integrity or availability impacts are noted.

CVE-2026-87290 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.04 LTS. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported.