Threats tagged 'ghsa-7hqr-jpxp-whq8'

CVE-2026-83368 is a vulnerability in the Oracle GraalVM Compiler component affecting multiple Oracle GraalVM products including Oracle GraalVM for JDK 17, JDK 21, and Oracle GraalVM Enterprise Edition. The vulnerability allows a remote unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data, perform unauthorized data modifications, and cause partial denial of service. The CVSS 3.1 base score is 7.0, indicating a medium severity level. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.