Known vulnerabilities in Oracle Java SE 25.0.4

Vendor: Oracle
Version: 25.0.4
Software CPE: cpe:2.3:a:oracle:java_se:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Java SE version 25.0.4 Oracle Java SE 25.0.4 is affected by 5 vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU161726 - Out-of-bounds read
CVE-2026-70906
CWE-125 Medium
No
No
- 07.11.2026 SB20261107449
SB2026110802
SB2026110822
#VU161727 - Out-of-bounds read
CVE-2026-61308
CWE-125 Medium
No
No
- 07.11.2026 SB20261107438
SB20261107441
SB20261107445
and 15 more
#VU161728 - Out-of-bounds read
CVE-2026-70907
CWE-125 Medium
No
No
- 07.11.2026 SB20261107438
SB20261107441
SB20261107445
and 15 more
#VU161729 - Out-of-bounds read
CVE-2026-60589
CWE-125 Low
No
No
- 07.11.2026 SB20261107438
SB20261107441
SB20261107445
and 15 more
#VU160723 - Improper input validation
CVE-2026-62574
CWE-20 Low
No
No
- 07.11.2026 SB20261107265
SB20261107266
SB20261107267
and 3 more