Known vulnerabilities in Oracle GraalVM for JDK

Vendor: Oracle
Software: Oracle GraalVM for JDK
Software CPE: cpe:2.3:a:oracle:oracle_graalvm_for_jdk:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 67
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle GraalVM for JDK Oracle GraalVM for JDK is affected by 67 known vulnerabilities: 4 high, 33 medium, 30 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126759 - Improper input validation
CVE-2026-34282		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 35 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU123884 - Integer overflow
CVE-2026-23865		 CWE-190 Medium
No
No
 - 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 49 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117485 - Improper input validation
CVE-2025-61755		 CWE-20 Low
No
No
 - 22.10.2025 SB20251022107
SB2026012079
#VU117486 - Improper input validation
CVE-2025-61748		 CWE-20 Low
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 19 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 28 more


Showing elements 1 - 20 out of 67