Known vulnerabilities in Oracle Java SE 26

Vendor: Oracle
Version: 26
Software CPE: cpe:2.3:a:oracle:java_se:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Java SE version 26 Oracle Java SE 26 is affected by 8 vulnerabilities: 5 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126759 - Improper input validation
CVE-2026-34282
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 35 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 77 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 73 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
- 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU123884 - Integer overflow
CVE-2026-23865
CWE-190 Medium
No
No
- 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 48 more