Openjdk (Oracle) - vulnerabilities (CVEs)

98 CVEs, 0 in the last 30 days, 241 known versions, newest CVE from 2024-01-16. Vendor: Oracle.

CVEs of Openjdk

• CVE-2024-20952 - CVSS 7.4 (high), 2024-01-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…
• CVE-2023-21968 - CVSS 3.7 (low), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2023-21967 - CVSS 5.9 (medium), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are…
• CVE-2023-21954 - CVSS 5.9 (medium), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2023-21937 - CVSS 3.7 (low), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected…
• CVE-2023-21939 - CVSS 5.3 (medium), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are…
• CVE-2023-21938 - CVSS 3.7 (low), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2023-21930 - CVSS 7.4 (high), 2023-04-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are…
• CVE-2022-21540 - CVSS 5.3 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21541 - CVSS 5.9 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-34169 - CVSS 7.5 (high), 2022-07-19: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java…
• CVE-2022-21476 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21349 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are…
• CVE-2022-21366 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21365 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21360 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21341 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are…
• CVE-2022-21340 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21305 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21293 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21299 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21291 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21296 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21294 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21282 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21277 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21283 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21248 - CVSS 3.7 (low), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are…
• CVE-2021-35603 - CVSS 3.7 (low), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35588 - CVSS 3.1 (low), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java…
• CVE-2021-35586 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java…
• CVE-2021-35578 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35567 - CVSS 6.8 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are…
• CVE-2021-35565 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35564 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java…
• CVE-2021-35561 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java…
• CVE-2021-35560 - CVSS 7.5 (high), 2021-10-20: Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit…
• CVE-2021-35559 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java…
• CVE-2021-35556 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java…
• CVE-2021-35550 - CVSS 5.9 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-20264 - CVSS 7.8 (high), 2021-10-06: An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the…
• CVE-2021-2388 - CVSS 7.5 (high), 2021-07-21: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java…
• CVE-2021-2369 - CVSS 4.3 (medium), 2021-07-21: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java…
• CVE-2021-2341 - CVSS 3.1 (low), 2021-07-21: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are…
• CVE-2021-32553 - CVSS 7.3 (high), 2021-06-12: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package…
• CVE-2021-3522 - CVSS 5.5 (medium), 2021-06-02: GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
• CVE-2021-3517 - CVSS 8.6 (high), 2021-05-19: There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be…
• CVE-2021-3537 - CVSS 5.9 (medium), 2021-05-14: A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.…
• CVE-2021-2163 - CVSS 5.3 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
• CVE-2021-2161 - CVSS 5.9 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
• CVE-2020-14803 - CVSS 5.3 (medium), 2020-10-21: Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily…
• CVE-2020-14792 - CVSS 4.2 (medium), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261,…
• CVE-2020-14798 - CVSS 3.1 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14797 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14796 - CVSS 3.1 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14779 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14782 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14781 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261,…
• CVE-2020-14621 - CVSS 5.3 (medium), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251,…
• CVE-2020-14593 - CVSS 7.4 (high), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251,…
• CVE-2020-14583 - CVSS 8.3 (high), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261,…
• CVE-2020-14581 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and…
• CVE-2020-14578 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and…
• CVE-2020-14577 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251,…
• CVE-2020-14579 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and…
• CVE-2020-14556 - CVSS 4.8 (medium), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251,…
• CVE-2020-2816 - CVSS 7.5 (high), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable…
• CVE-2020-2830 - CVSS 5.3 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2800 - CVSS 4.8 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java…
• CVE-2020-2805 - CVSS 8.3 (high), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2803 - CVSS 8.3 (high), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2781 - CVSS 5.3 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241,…
• CVE-2020-2773 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2767 - CVSS 4.8 (medium), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to…
• CVE-2020-2778 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to…
• CVE-2020-2756 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2755 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241,…
• CVE-2020-2754 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241,…
• CVE-2020-2757 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251,…
• CVE-2020-2659 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and…
• CVE-2020-2654 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and…
• CVE-2020-2604 - CVSS 8.1 (high), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241,…
• CVE-2020-2601 - CVSS 6.8 (medium), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241,…
• CVE-2020-2593 - CVSS 4.8 (medium), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241,…
• CVE-2020-2590 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241,…
• CVE-2020-2583 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241,…
• CVE-2019-13117 - CVSS 5.3 (medium), 2019-07-01: In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could…
• CVE-2014-8873 - CVSS 10 (critical), 2015-11-09: A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which…
• CVE-2014-2483 - CVSS 9.3 (critical), 2014-07-17: Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity,…
• CVE-2014-2405 - CVSS 10 (critical), 2014-05-14: Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different…
• CVE-2014-0462 - CVSS 10 (critical), 2014-05-14: Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different…
• CVE-2014-1876 - CVSS 4.4 (medium), 2014-02-10: The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and…
• CVE-2013-2461 - CVSS 7.5 (high), 2013-06-18: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle…
• CVE-2013-0169 - CVSS 2.6 (low), 2013-02-08: The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing…
• CVE-2013-0431 - CVSS 3.7 (low), 2013-01-31: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote…
• CVE-2012-5373 - CVSS 5 (medium), 2012-11-28: Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably,…
• CVE-2012-2739 - CVSS 5 (medium), 2012-11-28: Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger…
• CVE-2009-0581 - CVSS 4.3 (medium), 2009-03-23: Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a…