Search CVE reports


Toggle filters

1 – 10 of 530 results


CVE-2026-91403

Medium priority

Some fixes available 13 of 14

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Not affected Not affected Not affected Not affected Not affected
openjdk-17-crac Not affected Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Not affected Not affected Not affected Not affected —
openjdk-21-crac Not affected Not in release Not in release — —
openjdk-25 Not affected Not affected Not affected — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91487

Medium priority

Some fixes available 19 of 34

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91484

Medium priority
Needs evaluation

Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

11 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Needs evaluation Needs evaluation Needs evaluation — —
Show all 11 packages Show less packages

CVE-2026-91464

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91463

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91462

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91461

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91453

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE:...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91452

Medium priority

Some fixes available 26 of 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503,...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages

CVE-2026-91451

Medium priority

Some fixes available 26 of 34

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1;...

12 affected packages

openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjdk-8 Fixed Fixed Fixed Fixed Fixed
openjdk-9 Not in release Not in release Not in release — —
openjdk-lts Fixed Fixed Fixed Fixed Fixed
openjdk-13 Not in release Not in release Not in release Ignored —
openjdk-16 Not in release Not in release Not in release Ignored —
openjdk-17 Fixed Fixed Fixed Needs evaluation Needs evaluation
openjdk-17-crac Needs evaluation Not in release Not in release — —
openjdk-18 Not in release Not in release Ignored — —
openjdk-21 Fixed Fixed Fixed Needs evaluation —
openjdk-21-crac Needs evaluation Not in release Not in release — —
openjdk-25 Fixed Fixed Fixed — —
openjdk-27 Not in release Not in release Not in release — —
Show all 12 packages Show less packages