Jdk

CVEs (805)

• CVE-2017-10198MedAug 8, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.44cvss 6.8epss 0.03

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…

• CVE-2019-16168MedSep 9, 2019
  SQLite

  SQLite
  risk 0.43cvss 6.5epss 0.04

  In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

• CVE-2018-3211MedOct 17, 2018
  Oracle Corporation

  Java SE Embedded
  risk 0.43cvss 6.6epss 0.00

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serviceability). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181. Easily exploitable vulnerability allows low privileged attacker with logon to the…

• CVE-2018-13785MedJul 9, 2018
  Libpng

  Libpng
  risk 0.43cvss 6.5epss 0.04

  In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

• CVE-2018-11212MedMay 16, 2018
  IJG

  libjpeg
  risk 0.43cvss 6.5epss 0.05

  An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

• CVE-2018-2582MedJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.43cvss 6.5epss 0.05

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access…

• CVE-2016-5549MedJan 27, 2017
  Oracle Corporation

  Java SE Embedded
  risk 0.43cvss 6.5epss 0.03

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access…

• CVE-2026-60147MedJul 21, 2026
  Oracle Corporation

  Jdk
  risk 0.42cvss 6.5epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM…

• CVE-2018-14048MedJul 13, 2018
  Libpng

  Libpng
  risk 0.42cvss 6.5epss 0.03

  An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.

• CVE-2017-10243MedAug 8, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.42cvss 6.5epss 0.03

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…

• CVE-2016-5548MedJan 27, 2017
  Oracle Corporation

  Java SE Embedded
  risk 0.42cvss 6.5epss 0.03

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…

• CVE-2019-2684MedApr 23, 2019
  Apache

  Tomcat
  risk 0.41cvss 5.9epss 0.38

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network…

• CVE-2026-21933MedJan 20, 2026
  Graalvm

  Graalvm Ce Builds
  risk 0.40cvss 6.1epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle…

• CVE-2018-2641MedJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.40cvss 6.1epss 0.05

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with…

• CVE-2017-10356MedOct 19, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.40cvss 6.2epss 0.01

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows…

• CVE-2017-10293MedOct 19, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.40cvss 6.1epss 0.01

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE.…

• CVE-2026-22003MedApr 21, 2026
  Oracle Corporation

  GraalVM Enterprise Edition
  risk 0.39cvss 6.0epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u481 and 8u481-b50; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability…

• CVE-2022-21541MedJul 19, 2022
  Fedoraproject

  Fedora
  risk 0.39cvss 5.9epss 0.03

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and…

• CVE-2021-2161MedApr 22, 2021
  McAfee

  Epolicy Orchestrator
  risk 0.39cvss 5.9epss 0.03

  Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5,…

• CVE-2020-2585MedJan 15, 2020
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.39cvss 5.9epss 0.03

  Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful…