Known vulnerabilities in Oracle Java SE

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:java_se:*:*:*:*:*:*:*:*
Total vulnerabilities: 324
Public exploits: 19
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Java SE Oracle Java SE is affected by 324 known vulnerabilities: 12 critical, 35 high, 110 medium, 167 low Critical High Medium Low

Vulnerabilities (324)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126759 - Improper input validation
CVE-2026-34282
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 35 more
#VU126760 - Improper input validation
CVE-2026-22003
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422125
SB2026081334
and 1 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 77 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 74 more
#VU126763 - Improper input validation
CVE-2026-22008
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB2026050683
SB20260513117
and 18 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU123884 - Integer overflow
CVE-2026-23865
CWE-190 Medium
No
No
- 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 49 more
#VU122669 - Memory corruption
CVE-2026-20652
CWE-119 Low
No
No
- 11.02.2026 SB2026021187
SB2026021188
SB2026021191
and 27 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 89 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121731 - Out-of-bounds read
CVE-2026-21947
CWE-125 Low
No
No
- 20.01.2026 SB20260120153
#VU113533 - Use After Free
CVE-2025-7425
CWE-416 High
No
No
- 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU111972 - Integer overflow
CVE-2025-6052
CWE-190 Medium
No
No
- 26.06.2025 SB2025062635
SB2025062643
SB2025062644
and 7 more
#VU111225 - Integer overflow
CVE-2025-6021
CWE-190 High
No
No
- 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU109964 - Out-of-bounds read
CVE-2025-47219
CWE-125 Medium
No
No
- 30.05.2025 SB2025053005
SB2025062106
SB2025062318
and 7 more


Showing elements 1 - 20 out of 324